The Win32/Kryptik.HOBQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
Gridinsoft Anti-Malware
Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
What Win32/Kryptik.HOBQ virus can do?
- Behavioural detection: Executable code extraction – unpacking
- Yara rule detections observed from a process memory dump/dropped files/CAPE
- Creates RWX memory
- Possible date expiration check, exits too soon after checking local time
- Dynamic (imported) function loading detected
- CAPE extracted potentially suspicious content
- Authenticode signature is invalid
- CAPE detected the CryptBot malware family
How to determine Win32/Kryptik.HOBQ?
File Info:
name: 712EB9CA2C01D50A740F.mlwpath: /opt/CAPEv2/storage/binaries/069000df2aff680b682b7a894cfbadda0dc8d61195f42f7273b90368a23b1be4crc32: 831E5A1Bmd5: 712eb9ca2c01d50a740f7cc412753df2sha1: 7c69db5921d9ae6b421ff4e9493c6d0158737c3asha256: 069000df2aff680b682b7a894cfbadda0dc8d61195f42f7273b90368a23b1be4sha512: 046afe6e771e73d8308da7459f23ca6aa80216b7738e6d4cd35b2356b7325fa5197bfe560f823cf282a44a9eeddd1e86d6ca95098e84207ff9275db62e1d5dc5ssdeep: 12288:45k6YUeJiG+e+9UeJiG+e+9UeJiG+e+KcH:kSvJZ/wvJZ/wvJZ/utype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FF94E11553FD3999F2F34F7C79B9A262CC2A3C624E20C46E0684275E8D71869C979B33sha3_384: a280626f5d2cb901fd79f51e45ca9f8c7b9c47fd28b92d1bd36932fda0e4eb195f5434eee8f64599ff66b3b9029035c1ep_bytes: b9d41f00006800000000ff15e8804000timestamp: 1970-01-01 00:00:00Version Info:
FileVersion: 1, 5, 1, 4CompanyName: LyonetiidaeInternalName: ParanucleicArundo: PinchgutTriolefin: BarillaPrequalification: IntereatNonisobaric: DiabolepticMesocoelian: SaintessArthrostome: MotteSclerotiniose: TappietoorieMarcgravia: CaduacCapillitium: MerulioidHyperdactylia: NartheciumUnreconcilable: ChelodineFlagelliferous: ArribaUpcurrent: LackwitStradld: CovotaryKissingly: SelectedMetempsychosis: HeterotrichaSnapwood: UndercoloringAntipolygamy: PreobtainHingeless: OrichalcumTrisinuate: PastilleDimatis: DiazeuxisUnsecret: MonophysitePrithee: InimicalityUnthinking: ApplanationSistani: DybbukUnemendable: EyewaterDesignable: OvercastingApiculus: AuxinicallyActualistic: CacodorousLiwan: MultidirectionalGegg: UnpesteredStretchberry: BrodiaeaSubcingulum: SplanchnologicalChilcat: GrysbokCleistothecium: BullionStarful: PapaprelatistDropsy: BattologizeElectragist: RedecorationConsuetitude: ArchebiosisSalification: AporrhaidaeDiander: BasilysisPomaderris: MelodiouslyRoundaboutly: InquinationRauraci: NonassentationActivize: UnreelableFrugalist: SpiritlessSphaerenchyma: UnexpertlyDriver: CroakyVelvetseed: AphoristicallyPodocarpineae: MicroanalystRumourmonger: SemidarknessMetrotome: HeterozygoticMimetite: PennilessSequelae: DynamometamorphismCitromyces: UncongealedProrecall: MycetomatousTactus: ApodemalImplumed: PerigynialFroebelism: AdustionDevolute: VamphornPrereconcile: BarbulaRecurl: PoliticasterNeurilemmal: AerodynamicsPreflowering: OdontophoralUncatholicly: GratinateArchigony: CephalitisBurdalone: RoganCarpentering: NoonflowerBinocularity: UndisposednessTrypanosomal: UnfearfullyPropus: ProterothesisBranching: SerricornSimulatively: BallotaCounterstain: ProboscislikeProfessordom: PolyactiniaUnglimpsed: AttemperMuirburn: DirecterUnduplicability: XenialBeavery: MedioventralAporrhaidae: TagulaLukewarmish: ElectragistMedioventral: EnspiritManumitter: AgricolistCrined: RibandlikeEnsete: TaenAnywheres: OverbendOcularist: HelianthusUninvented: MallowwortIchthyosaurid: GummiferousGlassman: VerticillatedTurcoman: CapillitiumTrochid: MirrorscopeMasterate: AuricularPremieress: FarmyardOctaploidy: AccommodativeLucentio: SchizophyceaeCovotary: ExocardiaAlcae: WatsoniaWallwork: NecrotomistLudgatian: DisencumberAnotus: OutpickImpercipience: RepercutientPeroxidase: CapillitiumExcursive: ArchlexicographerIndeterminately: CocksureismOllamh: SponginessMoonwalker: NoctilucenceAssumable: ArthrostomeConfitent: GingiliSynthermal: GoalaMasticability: DisaccordanceAntipopular: AnnalineParroty: SacculoutricularTraitorling: PascuousOneirologist: TreenailBedad: TineweedBrodiaea: StupendousnessConversable: NirvanicBottler: UndesignednessFabulist: UngrantableSnorter: BeggiatoaceousRespade: DesirednessIntercessive: AmphitriteSupercomprehension: CofferdamMegalesian: AilantoBeray: RotatoriaUnmannerly: ProterothesisNelsonite: InrunningOuteye: AndrotomyTheromores: OtoblennorrheaPurler: NonjurorScrupuli: LikerPogoniate: CloggyDirecter: BranchingLouie: TruckleRadicular: CotenantMyopathia: EffendiMacraucheniidae: CervicofacialCatocathartic: FlancardHomomorph: PalpitantMetaphysicist: RumkinAnticheater: SurprisingnessPrevolitional: EtioporphyrinFieldy: AnticosmeticOxhide: JargonizeMotte: ShredderFrescoer: DynamotorSalele: SprightfulCarpodacus: VariolateAcaudal: LamasaryPhysiognomic: SemiparalysisGingivalgia: TrigoniidaePerkingly: OverconsumeRededicatory: KettlemakerShiftless: ColloidizeAcylation: LerSpiritless: SeamostUnnutritive: VariolateMonosymmetry: SulphoricinicCanaanitess: PeevednessEndoenteritis: TutballGrounded: PanachurePolyterpene: FringilliformPanachure: ExogenouslyStichomythy: InterconvertibleDissolubility: PredispatcherApractic: TunefulnessCongressionist: HellenocentricHexosephosphoric: IconoclasticallyTraditionalize: UnmanipulatableBarabra: PlurivorousBetwine: SicklemicCondenser: SemiprofaneProcommunism: CeriaNonliability: WitnessdomHydrazone: TrigoniaceousCurlingly: CitromycesUnpossibleness: UnodoriferousFoliiform: PodocarpineaeOutlandishlike: EugenolCosticartilaginous: CordedPlurivorous: UnshoddenOncologic: AppearancedUncapacious: FurrowerStaysail: ReprimandingHauteur: PiperonalRetroreflective: AntiplateletApologizer: ChromophotographContinuable: AnteriornessDownless: PanspermatismPleasedly: DispromiseAnterolaterally: LepisosteidaeSwatcher: MacanaImago: ShelvingSecundiflorous: NonfloweringOutpush: PhrenogastricInrooted: BalaenopteraFinality: SarakolleMainsail: AndrotomyVanilloes: ComplanateSparrowtongue: SubvirileButsu: VenerablyIleosigmoidostomy: StampableHaematoxylon: MagistralSelected: TagulaReknit: BesweetenFamiliarization: BdelloidIntermedial: PinbeforeAmidship: BesweetenPlasmolyzable: IntoxicableJacketless: FroggingGeoteuthis: MetastasisBerrypicking: UnterminatedFulmineous: GabellerOdontophoral: PetfulRoust: ToxiferGastroenterological: ReenUrosternite: UnconfrontablePlatinate: PrereconcileHandlike: CyanochroicBolometric: PhytotopographyUstilaginoidea: EtaminPreobviousness: CarfuffleUreteroplasty: LadkinNeurofibrillae: DoorwardNoninfinite: CapeskinSivaite: HyperconscientiousHemoculture: UnmarbledBumbledom: PhytotopographyTubulus: BicentenaryPosterotemporal: AmphibietyGraphostatics: HabilitatorMisname: HereditismInterconvertible: RebukerAndreaea: ArsylEnopla: RuritaniaDeaner: RewardproofNeurodynia: PyroxyleneDecolour: UnbroughtSalinification: BumbledomSemiparalysis: MetatitanateWinterishness: SelectedDispapalize: OffscapeOvarious: ChondromatousSphenion: ElatednessAmericanization: SolitidalUnthickened: LamedhToadery: LateriversionHydropathical: UndemonstrativelyUnireme: MontezumaHilding: CoasserterUnfumbling: UnderivedHemiope: CrepisTriglot: SunwaysWastrife: SantalwoodPanspermatism: DividualismCynosure: IncrotchetScotching: CloamenRoridulaceae: SphenophyllaceousGaylussite: InemendableSwabberly: UndrinkableUnchested: InsteamTrachean: PrepontineUndisqualifiable: LanklyCinderlike: ImmensiveSeasickness: TetranitroanilineLurchingly: VerticillaryUnscale: EquitangentialAnticaste: UnbeseemingEctopistes: SluggyMerchantish: CirsophthalmiaAiran: UnshowyAnaphase: CynodontiaLaterotemporal: MagazinerStarnie: AdustionUnsaddle: CorrugatorChemiotaxic: ExotericErgatandromorphic: TangaLinguanasal: ScythianCopable: FellenEssoinment: UnfowllikeSaite: StaymakingLaterodeviation: DiplopodUnterminated: ArruagueRaticidal: BaldribOrselle: FernbrakeSovereignship: GastroenterologyPatriotical: GovernablenessInjurable: PlurivorousBerm: SlinkweedPredilection: XenicidaeDioxy: AbortivenessNyctereutes: SaumonWhush: CurareBlitter: OmbrifugeTunefulness: ChylifactiveToxifer: IntertransmissibleLeucyl: SharkletCyamus: SturnineRedecoration: WisdomlessDictyotales: UnmeddledUnaccusing: ArillusLeucosphenite: DangersomeMetaluminate: LadybirdCountenancer: ColloidalityDybbuk: AdenalgyEmollient: InimicalityThoracoscope: OleoresinInemendable: RoomilyQuickwork: SesquiquartaUnfrustratable: InemendablePunjabi: NekkarMicrocyst: PostoralUninimical: ChordotomySulphonate: PetfulDepolish: SaplessHireless: PolypsychicObedience: HydrogenideWitlessness: PolymerousTineweed: SubmountainMicroseismical: ColadaDefense: EuglenidaeThiostannite: SporiferousAnerethisia: BleatingSerricorn: GopherberryArillus: ProcommunismInbearing: SemaphoricHackneyism: OpisthobranchHippiatrist: CounteractinglyNonconviction: TebetMagistral: HuronianManidae: SquamosisConductimeter: MedimnoPromagistrate: AdoperateFibrosarcoma: SchizophyceaeLatticework: RubidicUndertakerlike: IllaenusPriestcap: AnteriornessSilverily: SquamosisMonopolylogist: TheoremicCooniness: ImpeccantDiceplay: DiscomyceteCrakefeet: PithworkPraxitelean: NonfatalisticPrepontine: PedagogismOxyhemocyanin: OerAutogenous: BryophyllumVenator: PipingPolymerous: PastingWallonian: QophMosasauri: EuglenidaeCleptobiotic: MacraucheniidaeAnomalure: CenterboardStarchness: MarchlandTrachymedusae: ThunderpealUnperturbedness: SawmillingSeagoer: ReflexibleDotiness: BradypneaBurtonize: SojaFichtean: OphthalmitisPredisposed: CarbonatationDisplacement: VaccinogenousSpirifer: MurrainNorseland: DistractibleTieback: SolvableAmphitrite: WearilesslyPithecan: AnaboQuinqueseptate: GillieHelianthus: EpitaphicalJointless: AffinationRebite: VulcanistTirwit: UnoffensivelyAlloplasm: CarolanAgau: BeknottednessInconclusiveness: PaliliciumNonoverlapping: ChloralosePalilicium: HippotragusPoliticaster: AdonaiPrivately: HubbleHyperconscientious: TrochidPawner: FlagitiousDecorist: OverdecorationRightwards: ChantableArundinaria: ColophanyMulticentric: SporogoneHyaloiditis: RuminationChoreus: ControversionalismPhotochemically: MyxochondromaCatachresis: MetrotomeXylometer: ChickenbillEnteroid: CarbonatationBookkeeper: OikoplastEugenol: WorkedTegminal: CongenericDynagraph: PericonchalAngdistis: PodobranchPaedatrophy: BlinkingDiacetic: PeriophthalmitisWisecrackery: AbkarCoassession: LuskOrnithological: NondefiningUnicolorate: SentiendumCulinarily: RereeveUnwomanize: AffinationTribasilar: SimulativelyDecrystallization: WormedBlubberer: ImperforateUncriticising: PhyllanthusGotra: ChloraloseEnglifier: BianchiBaetylus: MyenteronNondecalcified: TetrasyllabicUnderscrupulous: RatiocinatorCenterboard: NudiflorousTranslatorship: StertoriousnessAuld: MongoyoProgger: AndreaeaDeaeration: PlumbismNeedlemaking: UnthinkingIntermeddlement: OverglintAdjiger: RadknightNeedily: BuddhTesserate: DynamotorRhythmometer: EndosporiumAdscendent: AngdistisBhandari: OutambushRideable: EnoplaAftermarriage: PedodontistLaticlave: OverconsumeStereome: TribasilarJohannist: GnomoniaIndologist: AcetphenetidUnregeneration: PhysaliidaeConcessionary: HotiUnamplified: UnteemingRenounceable: ColadaCrematorial: TickleproofBracteal: VoluptForebrace: IntereatXenial: IntorsionUnfur: AromatophorCeruleum: MendeeDeplorability: EddaicAcrolithan: GeonimAfterworking: AchmethaPyroxylene: PenalistHellenocentric: SerpentoidSeminebulous: ElenchticalArchespore: PresuspendCosmetician: MengOutvenom: ArrenotokyDisinherit: FeringiAfricanoid: TermonPenniless: StromeEpisternum: SemiseverelyPestilenceweed: SlipperTachylite: ConductimeterPseudepigraphic: GermanicalWrinkly: AncestoriallyDisclass: MeasurelessEternalness: UnicellatePelasgian: VitellaryTraversary: CorradeIphimedia: IndulgenceShrinkingly: ForetraceOxberry: PerhalogenDecernment: LatinistHemosporidian: PrayfulRamentaceous: CisoceanicFlamant: OdontophoralWhited: HullerRheumed: BeastlikeNonbreeder: TeutonityAirscrew: OutvenomEpendyme: UnemendableUnbeseeming: FrankliniteBicentenary: StaghoundSeaworn: SurrealisticPansmith: HyperdactyliaWitnessdom: VictorylessScheelite: PuzzlerMendee: NonconcurrentStomatodaeal: QophFestivally: PogoniateMicrosomia: DiabroticaMiscalculate: FracedinousTransgressive: AfterfameBourgeoise: OutflowSawdustish: CarnificialChondroxiphoid: HereditismTetractinose: AftermarriageAstrier: PhotocopyDispiteousness: UnpossiblenessAccommodative: TurflessHarassingly: KetogenEthicist: ThraupidaeAssarion: PythogenicPentadecylic: PropheticismHeer: TherapeutistSegmentary: HistopathologicalSoggily: CloggyPresuspend: SulfocarbimideOsteomyelitis: SubstratumOriginalFilename: BicalcaratePrivateBuild: ForereportTranslation: 0x0409 0x04e4
Win32/Kryptik.HOBQ also known as:
Bkav | W32.AIDetect.malware2 |
MicroWorld-eScan | Trojan.GenericKD.38877101 |
FireEye | Generic.mg.712eb9ca2c01d50a |
CAT-QuickHeal | Trojan.IGENERIC |
ALYac | Gen:Variant.Lazy.104275 |
Cylance | Unsafe |
Sangfor | Trojan.Win32.GenericML.xnet |
K7AntiVirus | Trojan ( 0058d50c1 ) |
K7GW | Trojan ( 0058d50c1 ) |
Cybereason | malicious.921d9a |
BitDefenderTheta | Gen:NN.ZexaF.34182.AqW@aGlQFzbi |
Symantec | ML.Attribute.HighConfidence |
ESET-NOD32 | a variant of Win32/Kryptik.HOBQ |
TrendMicro-HouseCall | TROJ_GEN.R002C0WAO22 |
Kaspersky | UDS:Trojan.Multi.GenericML.xnet |
BitDefender | Trojan.GenericKD.38877101 |
Avast | Win32:MalwareX-gen [Trj] |
Sophos | Mal/Generic-S |
Comodo | Malware@#2wg568fyfvr5j |
TrendMicro | TROJ_GEN.R002C0WAO22 |
McAfee-GW-Edition | BehavesLike.Win32.Agent.gh |
Emsisoft | Gen:Variant.Lazy.104275 (B) |
Ikarus | Trojan-Spy.Win32.CoinStealer |
Webroot | W32.Malware.Gen |
Avira | TR/AD.GenSteal.yqyoy |
Antiy-AVL | Trojan/Generic.ASMalwS.35169C7 |
Microsoft | Trojan:Win32/Mamson.A!ac |
GData | Trojan.GenericKD.38877101 |
Cynet | Malicious (score: 100) |
AhnLab-V3 | Downloader/Win.Generic.R467202 |
McAfee | Artemis!712EB9CA2C01 |
MAX | malware (ai score=86) |
VBA32 | Trojan.Sabsik.FL |
Malwarebytes | Spyware.PasswordStealer |
APEX | Malicious |
Rising | Trojan.Kryptik!8.8 (CLOUD) |
Yandex | Trojan.Kryptik!d3+Nd+2hcq8 |
SentinelOne | Static AI – Suspicious PE |
MaxSecure | Trojan.Malware.82199810.susgen |
Fortinet | W32/PossibleThreat |
AVG | Win32:MalwareX-gen [Trj] |
CrowdStrike | win/malicious_confidence_100% (W) |
How to remove Win32/Kryptik.HOBQ?
- Download and install GridinSoft Anti-Malware.
- Open GridinSoft Anti-Malware and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Select proper browser and options – Click “Reset”.
- Restart your computer.
Leave a Comment