Malware

About “Win32/Kryptik_AGen.BGD” infection

Malware Removal

The Win32/Kryptik_AGen.BGD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik_AGen.BGD virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Kryptik_AGen.BGD?


File Info:

name: 780A2EFA47B2BFAC387C.mlw
path: /opt/CAPEv2/storage/binaries/768e40276832acb9553a8b245d2fa6a1acb58a95a4abe812da7f992826fd5329
crc32: 3C9E1838
md5: 780a2efa47b2bfac387cf4705e5125f0
sha1: 55f55a2890ebfc4e901a4e572343373219950b95
sha256: 768e40276832acb9553a8b245d2fa6a1acb58a95a4abe812da7f992826fd5329
sha512: de736ac77f6657679688377d8387ca619d65b2d3c79c52eb8b9e3d0648c01d181646a01da6b2f3c6817a052c18f71d8c0c64b9a3526c5e907caa84fac23e4c5b
ssdeep: 24576:tpNFAff5ADMrDxpQK7LWJERvsjQ/iXiMlRoRsa/ZSCBHn67c:tpNm5ADMr12JERvYTi4RMsgVBHn64
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CF15C0AC17B0E547C4CE0479EA0DBA57C9C678782EA2C77572C8375F7932BC29986870
sha3_384: 490172b5d63c36233318f6ecab8b9a7ed54fe6bedbf6b0076fb7b6f0c78b478af707b27f65e92675aafe1b097c0e9651
ep_bytes: 53bb0c8603d28801063381908479e92a
timestamp: 1974-02-09 00:00:00

Version Info:

0: [No Data]

Win32/Kryptik_AGen.BGD also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Selfmod.4!c
MicroWorld-eScanTrojan.GenericKDZ.104849
ClamAVWin.Packed.Razy-9836307-0
FireEyeGeneric.mg.780a2efa47b2bfac
SkyhighBehavesLike.Win32.Generic.dc
McAfeeTrojan-FVOQ!780A2EFA47B2
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Cerber.01c13bd8
K7GWTrojan ( 005a15b21 )
K7AntiVirusTrojan ( 0001b3411 )
BitDefenderThetaGen:NN.ZexaF.36744.68Y@a84aMOh
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:Trojan.Win32.Copak
BitDefenderTrojan.GenericKDZ.104849
NANO-AntivirusTrojan.Win32.Selfmod.kdamif
AvastWin32:Evo-gen [Trj]
TACHYONTrojan/W32.Selfmod
SophosTroj/Agent-BFEY
F-SecureHeuristic.HEUR/AGEN.1368582
DrWebTrojan.Siggen12.42976
VIPRETrojan.GenericKDZ.104849
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKDZ.104849 (B)
IkarusTrojan-Downloader.Win32.FakeAlert
GDataWin32.Trojan.PSE.1B28NHU
JiangminTrojan.Selfmod.aonq
GoogleDetected
AviraHEUR/AGEN.1368582
Antiy-AVLTrojan/Win32.Kryptik.gify
KingsoftWin32.Trojan.Copak.gen
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Generic.D19991
ZoneAlarmUDS:Trojan.Win32.Copak
MicrosoftTrojan:Win32/Cerber.MPI!MTB
VaristW32/Trojan.MJSE-7842
AhnLab-V3Packed/Win.FJB.R622264
Acronissuspicious
VBA32Trojan.Copak
ALYacTrojan.GenericKDZ.104849
MAXmalware (ai score=82)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Win32/Kryptik_AGen.BGD?

Win32/Kryptik_AGen.BGD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment