Malware

Win32/Kryptik.HWFK (file analysis)

Malware Removal

The Win32/Kryptik.HWFK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HWFK virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the embedded win api malware family
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Kryptik.HWFK?


File Info:

name: D4C53341282B0CAAB8F0.mlw
path: /opt/CAPEv2/storage/binaries/f79a5c3f54e28c3f64b6143c9cba1bc050f500e7435d506955e7d37f152d09be
crc32: 3357D4B6
md5: d4c53341282b0caab8f04fcc62037dd3
sha1: 9ec47540d0438ff9d90988397c040058fd482dd6
sha256: f79a5c3f54e28c3f64b6143c9cba1bc050f500e7435d506955e7d37f152d09be
sha512: fc4b8d91b8c579cbfbec0df6d9e2ce4444413c15fb7c74e7928c545e3b31cf129711f878c4542e414cbbcae7b864ff30f01d5825bf051b2e3a61a0fb615584f8
ssdeep: 98304:2cH4hEXA7XaTcgRHC2cXCMm+lodDV0UgnPZmUw:2U+wIqHXcX9ydDVgN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12866D27D085EF03BFEB9E637E408690DF0A1876B7625ED4AC4E39581886BA5734C431E
sha3_384: 49194511fe012121464da0ab025403264091face673a7025a6a96eea0c1221bc86188136ce7dcaeb2047362e49616dc5
ep_bytes: 558bec83e4f883ec08c7442404000000
timestamp: 2019-06-23 22:23:00

Version Info:

0: [No Data]

Win32/Kryptik.HWFK also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
FireEyeGeneric.mg.d4c53341282b0caa
SkyhighBehavesLike.Win32.Generic.vh
Cylanceunsafe
SangforTrojan.Win32.Kryptik.V4t8
CrowdStrikewin/malicious_confidence_90% (D)
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HWFK
CynetMalicious (score: 100)
APEXMalicious
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Evo-gen [Trj]
TencentWin32.Trojan.Kryptik.Pcnw
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Suspicious PE
VaristW32/Graftor.B.gen!Eldorado
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin32.Trojan.PSE.1P9C2XC
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R631015
McAfeeArtemis!D4C53341282B
VBA32BScope.Trojan.Sdum
MalwarebytesGeneric.Malware.AI.DDS
RisingTrojan.Kryptik!8.8 (TFE:3:YTnHyUOpZQL)
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.HVJN!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.0d0438
DeepInstinctMALICIOUS

How to remove Win32/Kryptik.HWFK?

Win32/Kryptik.HWFK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment