Categories: Malware

Win32/Kryptik.HJRS malicious file

The Win32/Kryptik.HJRS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HJRS virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
Creates RWX memory
Performs some HTTP requests
Unconventionial language used in binary resources: Spanish (Costa Rica)
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

telete.in

apps.identrust.com

thereisnoscheme.top

How to determine Win32/Kryptik.HJRS?


File Info:
crc32: CD7393E1md5: e0f3a337f93e49d7d865be9f2d54d11cname: E0F3A337F93E49D7D865BE9F2D54D11C.mlwsha1: b05234de16feb66a64a871a8add01a3325b9b419sha256: 7fadf8cac7e4de6c1e6d1c628eb9a7723e264d1b0bec899a7dd41afe671fa72fsha512: 97df3ed37ddf979dab0f47dba75e9681413a37d4ae0175d74bccf0483b06665f5f2f110b335bcd2162d5aa79840086f75c2c3815ee49e4774e731ddbcebe7b46ssdeep: 12288:nTNl5KQiy/PuU54MVVSnYqzcrHzSguxnYHSR1:nc+nuU54MTSnYqGHcxYHSbtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HJRS also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen12.18238
MicroWorld-eScan	Trojan.GenericKD.45812615
FireEye	Generic.mg.e0f3a337f93e49d7
McAfee	GenericRXAA-AA!E0F3A337F93E
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.45812615
K7GW	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZexaF.34590.DCW@a8CTPjO
Cyren	W32/Kryptik.DLF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BotX-gen [Trj]
Kaspersky	HEUR:Exploit.Win32.Shellcode.gen
AegisLab	Trojan.Win32.Malicious.4!c
Rising	Malware.Obscure/Heur!1.9E03 (CLOUD)
Ad-Aware	Trojan.GenericKD.45812615
Emsisoft	Trojan.Crypt (A)
Comodo	Malware@#3u4wclbeofkjz
F-Secure	Trojan.TR/Crypt.Agent.qwqfr
TrendMicro	Trojan.Win32.GLUPTEBA.THCOBBA
McAfee-GW-Edition	BehavesLike.Win32.MultiPlug.gc
Sophos	Mal/Generic-S + Troj/Kryptik-TP
Ikarus	Trojan.Win32.Ranumbot
eGambit	Unsafe.AI_Score_94%
Avira	TR/Crypt.Agent.qwqfr
MAX	malware (ai score=87)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Glupteba.KM!MTB
Gridinsoft	Malware.Win32.AI.ns
Arcabit	Trojan.Generic.D2BB0B87
ZoneAlarm	HEUR:Exploit.Win32.Shellcode.gen
GData	Trojan.GenericKD.45812615
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Glupteba.R368765
ALYac	Trojan.GenericKD.45812615
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.HJRS
TrendMicro-HouseCall	Trojan.Win32.GLUPTEBA.THCOBBA
Tencent	Win32.Exploit.Shellcode.Akyl
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:BotX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Generic.HwoCnGEA