Malware

Win32/Kryptik.HMNA information

Malware Removal

The Win32/Kryptik.HMNA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Kryptik.HMNA virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Arabic (Morocco)
  • The binary likely contains encrypted or compressed data.
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
telete.in
apps.identrust.com
a.tomx.xyz

How to determine Win32/Kryptik.HMNA?


File Info:

crc32: CF4CCDBE
md5: 754a3c1e542998e5d39ff8311f101237
name: 754A3C1E542998E5D39FF8311F101237.mlw
sha1: 36fb8d2285a058b6a33d09a295245c000930abb4
sha256: bfb1e4895a98b83a61f405199730fea989dc84ab8acf6e6234e4264db179cc84
sha512: b738f1115bc000a99136e1dd7a52d694c8a497156fccf509a029ecaabd325cfcc56975a68a223cffb3cccd3ed1f62309c837cbfcf8087b5aedfe6fce166b86c4
ssdeep: 12288:UiYIoy05o62jH2P5phgiejG2WO66pTPN+emk:Cp5o6WoEi32W6TQet
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.HMNA also known as:

K7AntiVirusTrojan ( 00581f861 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.15127
CynetMalicious (score: 100)
CAT-QuickHealRansom.Stop.Z5
ALYacTrojan.GenericKD.37592793
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 00581f861 )
Cybereasonmalicious.285a05
CyrenW32/Kryptik.EYC.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HMNA
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan.Win32.Chapak.gen
BitDefenderTrojan.GenericKD.37592793
MicroWorld-eScanTrojan.GenericKD.37592793
Ad-AwareTrojan.GenericKD.37592793
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34142.FuW@a82Ji@kO
TrendMicroTROJ_FRS.0NA103II21
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGeneric.mg.754a3c1e542998e5
EmsisoftTrojan.GenericKD.37592793 (B)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_81%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/RedlineStealer.RAP!MTB
GDataWin32.Trojan.PSE.R36JSZ
AhnLab-V3Trojan/Win.MalPE.R441743
Acronissuspicious
McAfeePacked-GDV!754A3C1E5429
MAXmalware (ai score=87)
VBA32Malware-Cryptor.Azorult.gen
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_FRS.0NA103II21
RisingTrojan.Kryptik!1.D975 (CLASSIC)
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FKSF!tr
AVGWin32:RansomX-gen [Ransom]

How to remove Win32/Kryptik.HMNA?

Win32/Kryptik.HMNA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment