Categories: Malware

Win32/Kryptik.HPDC removal

The Win32/Kryptik.HPDC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HPDC virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Manipuri
Authenticode signature is invalid
Detects Sandboxie through the presence of a library
Detects Avast Antivirus through the presence of a library
Checks the presence of disk drives in the registry, possibly for anti-virtualization

How to determine Win32/Kryptik.HPDC?


File Info:
name: CAA3E9DBCE92B539FAA4.mlwpath: /opt/CAPEv2/storage/binaries/a452955fd0f4f35a6e36ac0f1739ce2ed4efddf81e598ce19754161e9d098904crc32: 56DB2602md5: caa3e9dbce92b539faa403ee507774a4sha1: bd208608ead2294da67ff40bd224781b78a08373sha256: a452955fd0f4f35a6e36ac0f1739ce2ed4efddf81e598ce19754161e9d098904sha512: bcc6695a3f0f144f8b775e72ee15dbadd2f8882d5936bdb4c08bd08e6714633fd2678e9d05eee4d862ca7bd552ba05dfbf095301cc40e48abdb5954e43997b9fssdeep: 3072:7JXUuIMWtwDtYZ0rfpz7wfl9i+jUhs0KtVggjcGkNIVqIpsxkgaBChUU:BOt+Yub9sfl9iIUhs0y7ITsqdigatype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T137549DC17392D6B1C0922E30B822CBA1257B7875D6207517FFB87B2F2E783D166A1356sha3_384: da07b450e7ffc51b75ae2b47e8fcd244bb19f60d6364dcf1f88bc0c48127070958356f707976dc68de742eda82213bdbep_bytes: e8874f0000e989feffff8bff558bec51timestamp: 2020-10-13 11:58:57
Version Info:
FileVersion: 39.42.11.19Copyrighz: Copyright (C) 2022, pazkarteProjectVersion: 25.13.80.11

Win32/Kryptik.HPDC also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Agent.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.50127907
FireEye	Generic.mg.caa3e9dbce92b539
CAT-QuickHeal	Trojan.StrabPMF.S27551560
McAfee	Packed-GDT!CAA3E9DBCE92
Cylance	Unsafe
Sangfor	Trojan.Win32.Strab.gen
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Ransom:Win32/StopCrypt.0769db60
K7GW	Riskware ( 00584baa1 )
Cyren	W32/Crypter.A.gen!Eldorado
Symantec	Packed.Generic.525
ESET-NOD32	a variant of Win32/Kryptik.HPDC
APEX	Malicious
Avast	Win32:AceCrypter-T [Cryp]
Kaspersky	HEUR:Trojan.Win32.Strab.gen
BitDefender	Trojan.GenericKD.50127907
NANO-Antivirus	Trojan.Win32.Kryptik.jnxqkq
Rising	Trojan.Kryptik!1.D977 (CLOUD)
Ad-Aware	Trojan.GenericKD.50127907
Sophos	Mal/Generic-S + Troj/Krypt-IR
Comodo	Malware@#1ephy567em1sc
DrWeb	Trojan.Siggen17.35266
Zillya	Trojan.Kryptik.Win32.3736141
TrendMicro	TROJ_GEN.R002C0PD722
McAfee-GW-Edition	Packed-GDT!CAA3E9DBCE92
Emsisoft	Trojan.GenericKD.50127907 (B)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE.14VDVPW
Jiangmin	Trojan.Strab.aqm
Avira	TR/Crypt.Agent.efpqj
Microsoft	Ransom:Win32/StopCrypt.PBF!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Packed/Win.GDT.C5054158
ALYac	Trojan.GenericKD.50127907
MAX	malware (ai score=85)
VBA32	BScope.Malware-Cryptor.Hlux
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PD722
Tencent	Trojan-Spy.Win32.Stealer.16000356
Yandex	Trojan.Kryptik!rqKnP14Qwy0
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Packed.GDT!tr
AVG	Win32:AceCrypter-T [Cryp]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)