Categories: Malware

How to remove “Win32/Kryptik.HJRK”?

The Win32/Kryptik.HJRK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HJRK virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (5 unique times)
Performs some HTTP requests
Unconventionial binary language: Persian (Iran)
Unconventionial language used in binary resources: Slovak
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

telete.in

apps.identrust.com

greenmile.top

How to determine Win32/Kryptik.HJRK?


File Info:
crc32: 80CABF81md5: a04d426b8812c6fa62ed3857e38acddbname: A04D426B8812C6FA62ED3857E38ACDDB.mlwsha1: dc860c84193c470568639e8743f703e6720ffb50sha256: 063d7b432fa85262f3515bbd8b51f81f3461a2e413b5782471ee5ab08fca59c0sha512: cad282b10279d64f4f7f5a1be0c2d98f57088c8f67903ca44d629e77fa2f09216ca30de9481c2a8c589fde55dc89ecaefc3b8aa5f66f0c77bde9b4f6d6a32396ssdeep: 12288:28ShMgAGq9THO1cor38+X3/rDuWYJlj0YSvtFS+EtTVSJ2CIA:2bAdOVr38CDuZK/TeVVS0CIAtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: calimalimodunator.exeFileVersions: 7.0.0.23LegalCopyrights: VsekdagProductVersions: 67.0.20.45Translation: 0x0429 0x04e7

Win32/Kryptik.HJRK also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.a04d426b8812c6fa
McAfee	Artemis!A04D426B8812
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.45799226
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:DangerousObject.Multi.Generic
Rising	Backdoor.Mokes!8.619 (TFE:dGZlOgawkQ9TRCvxSg)
Emsisoft	Trojan.GenericKD.45799226 (B)
DrWeb	Trojan.PWS.Siggen2.61964
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Azorult!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.GenericKD.45799226
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34590.IC0@aa9JEMkG
VBA32	BScope.Backdoor.Mokes
Malwarebytes	Trojan.MalPack.GS
ESET-NOD32	a variant of Win32/Kryptik.HJRK
eGambit	Unsafe.AI_Score_96%
Fortinet	PossibleThreat.PALLAS.H
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_60% (D)
Qihoo-360	HEUR/QVM10.1.9077.Malware.Gen