Malware

About “Win32/Kryptik.HUIM” infection

Malware Removal

The Win32/Kryptik.HUIM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HUIM virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Kryptik.HUIM?


File Info:

name: 0BA0D77817B3327FD800.mlw
path: /opt/CAPEv2/storage/binaries/c81032be0a2b40b25e7b979b772b8c22ac25235de819e41ee87bec01ec2c263c
crc32: 0E05A8E2
md5: 0ba0d77817b3327fd8006717d35d330d
sha1: a35b4d76b583f177430825c1d9d9bd4690a8d3ad
sha256: c81032be0a2b40b25e7b979b772b8c22ac25235de819e41ee87bec01ec2c263c
sha512: 53539c7985f5d07fbe0ef542887288acd7f905e10e099617d20a58d26dccb5a1011f763a0b73fdc37c815c032c910fae47b9b807b128965ab7c52993626c2d9f
ssdeep: 3072:fMKRPLFFfdTijyxohMDmyuPIImFJWxTIhq+95+81JukySb1vSSM5uEAxre0gUo:tLFFTaMDA3XU4E4kySb1vSVAq0e
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T102149E1A2C619777CBB97634D4E880E1F434F51472BAC16DCBB86C3BAB021DD62172AD
sha3_384: 41b1a047a4e0f6c49e167f35b9631262dbb503c627a4482c31e5ab616023103399925b4bcb6347ff7a73477bf799c405
ep_bytes: e8d0230000e9a4feffff558bec83ec08
timestamp: 2023-08-24 19:53:27

Version Info:

Comments: consectetur urna eget et dictum hac
CompanyName: Cursus mollis augue vulputate
FileDescription: adipiscing adipiscing venenatis
FileVersion: 2.645.766.287
InternalName: Sed in pellentesque est. Elit
LegalCopyright: Copyright © That after a set amount
LegalTrademarks: Augue lacinia urna amet
OriginalFilename: sit down
ProductName: sit molestie integer faucibus
ProductVersion: 2.645.766.287
Translation: 0x081a 0x081a

Win32/Kryptik.HUIM also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
MicroWorld-eScanTrojan.GenericKD.68948043
FireEyeGeneric.mg.0ba0d77817b3327f
ALYacTrojan.GenericKD.68948043
Cylanceunsafe
SangforInfostealer.Win32.Kryptik.Vmqp
AlibabaTrojanSpy:Win32/Stealer.40cdddc6
Cybereasonmalicious.6b583f
BitDefenderThetaGen:NN.ZexaF.36662.lq0@a0xzdmni
CyrenW32/Kryptik.KKK.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HUIM
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.Stealer.etlf
BitDefenderTrojan.GenericKD.68948043
NANO-AntivirusTrojan.Win32.Stealer.jzcodc
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.13ed55df
EmsisoftTrojan.GenericKD.68948043 (B)
F-SecureTrojan.TR/AD.RedLineSteal.usjew
VIPRETrojan.GenericKD.68948043
TrendMicroTrojanSpy.Win32.REDLINE.YXDHZZ
McAfee-GW-EditionArtemis!Trojan
Trapminemalicious.high.ml.score
SophosTroj/Steal-DQZ
IkarusTrojan.Agent
GDataTrojan.GenericKD.68948043
JiangminTrojanSpy.Stealer.aijq
AviraTR/AD.RedLineSteal.usjew
MAXmalware (ai score=83)
Antiy-AVLTrojan/Win32.Kryptik
ArcabitTrojan.Generic.D41C104B
ZoneAlarmTrojan-Spy.Win32.Stealer.etlf
MicrosoftTrojan:Win32/RedLine.MB!MTB
GoogleDetected
AhnLab-V3Trojan/Win.PWSX-gen.R600863
McAfeeArtemis!0BA0D77817B3
MalwarebytesSpyware.RedLineStealer
TrendMicro-HouseCallTrojanSpy.Win32.REDLINE.YXDHZZ
RisingBackdoor.Agent!8.C5D (TFE:5:dBsbDo2iO6J)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.216192844.susgen
FortinetPossibleThreat.MU
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32/Kryptik.HUIM?

Win32/Kryptik.HUIM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment