PUA

Win32:Kryptik-MXT [PUP] (file analysis)

Malware Removal

The Win32:Kryptik-MXT [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:Kryptik-MXT [PUP] virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32:Kryptik-MXT [PUP]?


File Info:

name: 1DF1566FDA494A2863BB.mlw
path: /opt/CAPEv2/storage/binaries/a864a9290c9755522d1d469e17ee8d24b01d0008821a050c6867f8876c4f1103
crc32: B09B2CF9
md5: 1df1566fda494a2863bb9b52c6dd07c2
sha1: 0c1397da34ecad235699dcd34455193ae76bb317
sha256: a864a9290c9755522d1d469e17ee8d24b01d0008821a050c6867f8876c4f1103
sha512: 4ad8e67b5dd5ff98dcab05a44ae7d94063a6eab663a50eff7dbe21aac4841b70734f9ea578628d1a4b71725a1aff335e6e92b75e2e84490a40735d6edba6b843
ssdeep: 1536:wEZakjrU2a3T6N80ksgziL01AuNTiuzReR/n7+PCq754Vgvm9NeAn6enrtfnne1R:Ja+rU22sLZLuAuNTiukR/7+PPGPrxver
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18493CF937EDA8EF0F68C46B088F79F9A0392BC5F50510B4AF6D9F9BD5832151212722D
sha3_384: e24f34a4fbef984cb712138014308b421621d6eec7a08f479bce450ab2c100c989c113384ba20865f84401d91e557f10
ep_bytes: 5589e583ec18c7042402000000ff15b4
timestamp: 2013-03-24 09:07:08

Version Info:

0: [No Data]

Win32:Kryptik-MXT [PUP] also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.76393
FireEyeGeneric.mg.1df1566fda494a28
McAfeeDownloader-FKW
CylanceUnsafe
VIPREGen:Variant.Barys.76393
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0040f53f1 )
K7GWTrojan ( 0040f53f1 )
Cybereasonmalicious.fda494
BitDefenderThetaAI:Packer.ACBC2ED61F
CyrenW32/Downloader.GQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.AXJX
APEXMalicious
ClamAVWin.Trojan.Kryptik-2112
Kasperskynot-a-virus:HEUR:Downloader.Win32.LMN.gen
BitDefenderGen:Variant.Barys.76393
AvastWin32:Kryptik-MXT [PUP]
RisingTrojan.Generic!8.C3 (RDMK:cmRtazoxHDugSBC13XmbNwaoXZFz)
Ad-AwareGen:Variant.Barys.76393
SophosTroj/LdMon-A
ComodoTrojWare.Win32.Kryptik.AXJX@4vl4hu
BaiduWin32.Trojan.Kryptik.dl
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.nc
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Barys.76393 (B)
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Barys.76393
JiangminTrojan/Generic.atwqf
GoogleDetected
AviraPUA/LoadMoney.Gen
MicrosoftProgram:Win32/Wacapew.C!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.C165374
VBA32BScope.Downware.LMN
ALYacGen:Variant.Barys.76393
MAXmalware (ai score=80)
YandexTrojan.GenAsa!TjEWbWsUngc
FortinetW32/Kryptik.AXJX!tr
AVGWin32:Kryptik-MXT [PUP]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Win32:Kryptik-MXT [PUP]?

Win32:Kryptik-MXT [PUP] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment