Win32/Kryptik.HUYH (file analysis)

The Win32/Kryptik.HUYH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HUYH virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Kryptik.HUYH?


File Info:
name: 53242B6F7D8611EC84F1.mlw
path: /opt/CAPEv2/storage/binaries/398db1a29edd9a473ee6e01b032aa549aa53dd531be2f37e50f681de5037170e
crc32: 6F80E59C
md5: 53242b6f7d8611ec84f168320b1baae1
sha1: 65680d5b941e81fc4a14733e6d15086a5f83b8ff
sha256: 398db1a29edd9a473ee6e01b032aa549aa53dd531be2f37e50f681de5037170e
sha512: 9097323ac7f71a7c14674956120fef43429883614e14d95119ea4c21af84129e2deea511c64ce0c431a878dfb95b8ac746cc11050aaf8a075602ebc30334da60
ssdeep: 24576:YSh0FHWdgAw/26p6XytGbSaOcKtG/tg6j2:Ys1w/26p6ira+Qx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14F459E2675D382A2DCF5127A42DD7A2541AEF3640B2B24CF359C16EED710BD0AF32B91
sha3_384: 4fad40447746bed0d82cbf8fb8e34cffd7a5ed08f577477088c588867f7ec72d62b3755f2563bc898fb1ca41b3b6b5ee
ep_bytes: e9962a0400e942990500e90bb10400e9
timestamp: 2023-10-27 16:44:48

Version Info:
0: [No Data]

Win32/Kryptik.HUYH also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win32.Generic.th
BitDefenderTheta	Gen:NN.ZexaF.36792.hDW@aGaT!jb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HUYH
APEX	Malicious
ClamAV	Win.Packed.Pwsx-10012424-0
Kaspersky	VHO:Trojan-PSW.Win32.Convagent.gen
Rising	Trojan.Generic@AI.100 (RDML:VY/lKZEfudZ7dSpcZ7atwA)
Ikarus	Trojan.Win32.Redline
Google	Detected
Varist	W32/Kryptik.KNN.gen!Eldorado
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	VHO:Trojan-PSW.Win32.Convagent.gen
Cynet	Malicious (score: 100)
DeepInstinct	MALICIOUS
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
AVG	TrojanX-gen [Trj]
Avast	TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Win32/Kryptik.HUYH?

Win32/Kryptik.HUYH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X