Malware

Win32/Kryptik_AGen.BGD (file analysis)

Malware Removal

The Win32/Kryptik_AGen.BGD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik_AGen.BGD virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Kryptik_AGen.BGD?


File Info:

name: C92A2F7BACD3A14F87BB.mlw
path: /opt/CAPEv2/storage/binaries/a19ec9e880770b082dcc324a198f826415ae6965d0436a351725149411c06c2c
crc32: EB49BE72
md5: c92a2f7bacd3a14f87bb9795a0cf9689
sha1: 05170c3b755fcdb76720bd8eab56b1d0ad7fe5c8
sha256: a19ec9e880770b082dcc324a198f826415ae6965d0436a351725149411c06c2c
sha512: a32b0f7a4b7f36fa3c8c6ae2fbef2e226965279e7c8a22d55b8768c53a8b6fcdb7daff95df15a0a51dbcac8547b8551b84c070fd8eacb337f835cacffb6abc9c
ssdeep: 24576:IuDpmhdDOaIY+jWVirmzoAg2a/ZSCBHn677:HQhdyaujhrmpgVBHn6
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17625CF6FA77117C7C45E42FAD94DDE745906AC782BBAD3A03108F98BFB3239490466B0
sha3_384: 290a4808190de1cfd4ae2f808da7994db0185ac62a97af41a3e73055bf6042c9ca198b281b000cb03a3506e098a67a3c
ep_bytes: f62a68d2a643ec55a3a2e5c421e88d7e
timestamp: 1974-02-09 00:00:00

Version Info:

0: [No Data]

Win32/Kryptik_AGen.BGD also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.104139
SkyhighBehavesLike.Win32.Trojan.fc
McAfeeTrojan-FVOQ!C92A2F7BACD3
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Khalesi.gen
BitDefenderTrojan.GenericKDZ.104139
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
EmsisoftTrojan.GenericKDZ.104139 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen2
VIPRETrojan.GenericKDZ.104139
SophosTroj/Agent-BFEY
IkarusTrojan-Downloader.Win32.FakeAlert
JiangminTrojan.Copak.cypp
AviraTR/Crypt.XPACK.Gen2
Antiy-AVLTrojan/Win32.Kryptik.gify
MicrosoftTrojan:Win32/Cerber.MPI!MTB
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Generic.D196CB
ZoneAlarmVHO:Trojan.Win32.Khalesi.gen
GDataWin32.Trojan.PSE.1B28NHU
VaristW32/Trojan.MJSE-7842
AhnLab-V3Packed/Win.FJB.R622264
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36680.!8Z@a84aMOh
ALYacTrojan.GenericKDZ.104139
TACHYONTrojan/W32.Selfmod
VBA32Trojan.Copak
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.b755fc
DeepInstinctMALICIOUS

How to remove Win32/Kryptik_AGen.BGD?

Win32/Kryptik_AGen.BGD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment