Categories: Malware

Should I remove “Win32/Kryptik.HRLP”?

The Win32/Kryptik.HRLP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HRLP virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Tswana
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Deletes executed files from disk
Uses suspicious command line tools or Windows utilities

How to determine Win32/Kryptik.HRLP?


File Info:
name: 64ABCB735B243BAD2EC6.mlwpath: /opt/CAPEv2/storage/binaries/3d64e25180515f9c71545ef1298b92bd5e85b2202c98d8a9eed25ae086e87636crc32: 96405CF2md5: 64abcb735b243bad2ec68cc61ca563bfsha1: a2c28ffae26b1668b3b6880f972f926e68258f57sha256: 3d64e25180515f9c71545ef1298b92bd5e85b2202c98d8a9eed25ae086e87636sha512: a5ea45d49b83e0dbf7779a30556e879a2fd6da2b187b29fff5337b5b4bfb84833080cf9a6586071c0c146e4bb2dfd3b749ca67e9ba079f3dd7d57f2521cde8ffssdeep: 3072:AxApHNvsqje8W7xh45EIMPVvHt9nE4uypFuSrXMKsxiaq8sv/vvBAjHeJ+o1z3xG:AupKqjCLJI4VrnpN/sWz2r0Tjtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F674F1713EE0C032E8E274304572CB651A7FB93226658947B7F8266D6E313E29A76347sha3_384: 8b5e66362ba5b8521a3c81946e399bbce6a2cca00237057a5f1277112997753892dcc91e5a13965d471b3a5488b20632ep_bytes: e85c690000e978feffff8bff558bec8btimestamp: 2021-05-14 22:19:44
Version Info:
FileVersions: 11.83.82.66InternationalName: povgwaoci.iweCopyright: Copyright (C) 2022, somoklosProjectsVersion: 75.0.48.6

Win32/Kryptik.HRLP also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Trojan.GenericKD.63441119
ClamAV	Win.Packed.Botx-9976896-0
FireEye	Generic.mg.64abcb735b243bad
McAfee	Artemis!64ABCB735B24
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Trojan.GenericKD.63441119
Cybereason	malicious.ae26b1
Arcabit	Trojan.Generic.D3C808DF
Cyren	W32/Kryptik.HUW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HRLP
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Packed.gen
Alibaba	Trojan:Win32/GenKryptik.5bfeae42
Rising	Trojan.Generic@AI.100 (RDML:U44I4ZPFTMaN9OrpMGq3Tg)
Ad-Aware	Trojan.GenericKD.63441119
Sophos	Mal/Generic-S + Troj/Krypt-RQ
McAfee-GW-Edition	BehavesLike.Win32.Lockbit.fh
Trapmine	suspicious.low.ml.score
Ikarus	Trojan-Ransom.StopCrypt
Microsoft	Trojan:Win32/Azorult.FW!MTB
ZoneAlarm	HEUR:Trojan.Win32.Packed.gen
GData	Trojan.GenericKD.63441119
Google	Detected
AhnLab-V3	Trojan/Win.BotX-gen.R533305
Acronis	suspicious
VBA32	BScope.TrojanDownloader.Ajent
ALYac	Trojan.GenericKD.63441119
MAX	malware (ai score=84)
Malwarebytes	Trojan.MalPack.GS
Tencent	Win32.Trojan.Packed.Qgil
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.ETEM!tr
AVG	Win32:BotX-gen [Trj]
Avast	Win32:BotX-gen [Trj]