Win32/Kryptik.HRHE removal tips

The Win32/Kryptik.HRHE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HRHE virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the RedLine malware family

How to determine Win32/Kryptik.HRHE?


File Info:
name: 50D451B5C1F3AF1E0547.mlw
path: /opt/CAPEv2/storage/binaries/40fa42aab958b25838e4c0daedb5579ebedceb58a2815dac2b06ec6e0d0c4fe5
crc32: 2A5295FB
md5: 50d451b5c1f3af1e05470026c0631c60
sha1: 9d8edc61ba7e1c6524ae2133c3119ac8eb447cac
sha256: 40fa42aab958b25838e4c0daedb5579ebedceb58a2815dac2b06ec6e0d0c4fe5
sha512: 749968e81b3f795602f40b8783dd3d87c8982f651e123c9a45ec4dbacf785c82d32c9b9406c2e9da66e461d48b47e2498afa2d7da50b9f5beb93643afebba5a2
ssdeep: 12288:/kGATPA2vBiV3bCXYvEiNi1uZVLYy1ziRuw7TQhFoTpjtwxTVJDN4SFjb:/kGATY2QEik1Ly1ziLcZl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1ABA49F11B9C0807BD63F38324660B2B58DAEF43118D15A4F978C0B7E5FB5AD06A25B7B
sha3_384: 4a00fbad067a5428ecc160730c3128195e7ceff10ac8d3de9736d9d418c0afebc813ddd8e49dbf04f13df19bcac0166f
ep_bytes: e8ba0a0000e917feffff8b4df464890d
timestamp: 2022-11-20 19:38:33

Version Info:
0: [No Data]

Win32/Kryptik.HRHE also known as:

Lionic	Trojan.Win32.Stealer.12!c
DrWeb	Trojan.PWS.StealerNET.125
FireEye	Generic.mg.50d451b5c1f3af1e
Cylance	Unsafe
Alibaba	Trojan:Win32/runner.ali1000123
BitDefenderTheta	Gen:NN.ZexaF.34796.DqW@a0wSiAh
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HRHE
APEX	Malicious
Kaspersky	UDS:Trojan-Spy.Win32.Stealer.gen
Avast	PWSX-gen [Trj]
Rising	Trojan.Generic@AI.85 (RDML:fL1a7F1Y+phBPITmvgVOKg)
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
ZoneAlarm	UDS:Trojan-Spy.Win32.Stealer.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
MaxSecure	Trojan.Malware.300983.susgen
AVG	PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Win32/Kryptik.HRHE?

Win32/Kryptik.HRHE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X