What is "Win32/Kryptik.HKYN"?

The Win32/Kryptik.HKYN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HKYN virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Performs some HTTP requests
Uses Windows utilities for basic functionality
A process attempted to delay the analysis task by a long amount of time.
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

www.bing.com

app.buboleinov.com

How to determine Win32/Kryptik.HKYN?


File Info:
crc32: F4694778
md5: bbfd165641bebc7802728c44d17c11f3
name: BBFD165641BEBC7802728C44D17C11F3.mlw
sha1: 7ab715f5399830e762dba1adb1e6286616998ade
sha256: 478be2a2eff77ac1ad7ff5e048bfb795ff7afd323f8e95b769ad26c40e582f38
sha512: 5b79600018418a7299cd75a6835852aee2aeb0addc10828b6d7d2cd7c52cf1a9b206a6bd4731240d1446bcf7f4b0fdaa02a805fd867786f5137b2f0d3bfc59e2
ssdeep: 6144:NAqX6GBMYdZdpfkmGjwSgF8H3V6Ucln5wdL5FczVN877v4FOH/:N5qQdZrkmGs58H3k/N5wdL5OVN877aG
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Fair particular Corporation. All rights reserved Incaught
InternalName: Feel
FileVersion: 0.0.1.929
CompanyName: Fair particular Corporation
ProductName: Fair particularxae Skin thinxae
ProductVersion: 0.0.1.929
FileDescription: Fair particular Skin thin
OriginalFilename: Product.dll
Translation: 0x0409 0x04b0

Win32/Kryptik.HKYN also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKDZ.75322
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Kryptik.8c6f0014
K7GW	Trojan ( 0057cb651 )
K7AntiVirus	Trojan ( 0057cb651 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HKYN
Avast	Win32:BankerX-gen [Trj]
ClamAV	Win.Packed.Generic-9863134-0
BitDefender	Trojan.GenericKDZ.75322
MicroWorld-eScan	Trojan.GenericKDZ.75322
Ad-Aware	Trojan.GenericKDZ.75322
Sophos	Mal/Generic-S + Troj/Ursnif-FE
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	RDN/PWS-Banker
FireEye	Trojan.GenericKDZ.75322
Emsisoft	Trojan.GenericKDZ.75322 (B)
Webroot	W32.Malware.Gen
Avira	TR/AD.UrsnifDropper.xxlfi
Microsoft	Trojan:Win32/Wacatac.B!ml
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKDZ.75322
AhnLab-V3	Trojan/Win.Generic.C4481010
McAfee	Artemis!BBFD165641BE
MAX	malware (ai score=83)
Malwarebytes	Trojan.Crypt
Panda	Trj/Agent.BER
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.HKYA!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml

How to remove Win32/Kryptik.HKYN?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Kryptik.HKYN”?