Malware

About “Win32/Kryptik.HMIK” infection

Malware Removal

The Win32/Kryptik.HMIK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HMIK virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

telete.in
apps.identrust.com

How to determine Win32/Kryptik.HMIK?


File Info:

crc32: 8265845B
md5: 17154ce0df2477a9caa57a2fc9ade12f
name: 17154CE0DF2477A9CAA57A2FC9ADE12F.mlw
sha1: 1c5d885911a82eef7bca53dd4f2b90b6af410c01
sha256: 23e90f7107a6965ebfaf5fcf719feb3fff0b41747a8fd46713ac7cbef4535dc9
sha512: 7b1528c01718dfa13c1448c67397c6bed745846ce170cb5f1f7f452941bc9fe117519b9cd4e0608ff444d0172bd34ae50bc16edd332dc96e448018db36f0b09e
ssdeep: 12288:BJp/mfF6y1EVZRY1M8Srfoy/9iTd7wTJe97THlS:vGFzaR8ScyAJc1WJS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: saxzmoimoku.apa
ProductVersion: 7.12.29.13
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0121 0x009f

Win32/Kryptik.HMIK also known as:

LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Kryptik.8da3632f
K7GWTrojan ( 0056d16b1 )
K7AntiVirusTrojan ( 0056d16b1 )
CyrenW32/Kryptik.EWJ.gen!Eldorado
ESET-NOD32a variant of Win32/Kryptik.HMIK
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Zenpak.gen
BitDefenderTrojan.GenericKD.46919403
MicroWorld-eScanGen:Variant.Fragtor.15279
Ad-AwareGen:Variant.Fragtor.15279
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34126.Fq0@aueZTslG
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.mg.17154ce0df2477a9
EmsisoftGen:Variant.Fragtor.15279 (B)
SentinelOneStatic AI – Malicious PE
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Azorult.RF!MTB
GDataWin32.Trojan-Stealer.Racealer.O4S59G
Acronissuspicious
McAfeeRDN/Upatre
MAXmalware (ai score=85)
VBA32BScope.Backdoor.Mokes
MalwarebytesTrojan.MalPack
RisingTrojan.Kryptik!1.D91D (CLASSIC)
IkarusTrojan.Win32.Azorult
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FJYS!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Win32/Kryptik.HMIK?

Win32/Kryptik.HMIK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment