Win64/Kryptik.CKZ (file analysis)

The Win64/Kryptik.CKZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Kryptik.CKZ virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win64/Kryptik.CKZ?


File Info:
crc32: 0283846E
md5: c78db2c6c4637d58dac9347eda458be5
name: C78DB2C6C4637D58DAC9347EDA458BE5.mlw
sha1: fb77418e6a4fce8b66db2f60da7e783759632139
sha256: da2dcdb3b3d1655fe3507534eb4677aec923629dfbf37b4d31075d6e5d8ab45a
sha512: 961d167dc8c34714a7d5c5981e1cf4f0b2ba8ab9fa47e8d64a339e041fb5f681c1a53da5c7fea10dcf1e73b81bf4b3274962d91d9064c0dbc3742abf0b01f566
ssdeep: 768:9PLOngXwrl9ccG1hLEFRjGRN5LD2xsKn8Jp6tU5FGOM3irKg0T:9PGZmxqAdhK8JkQU51
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Win64/Kryptik.CKZ also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.IcedID.53
CAT-QuickHeal	Trojan.IcedID
ALYac	Trojan.GenericKDZ.75201
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Kryptik.CKZ
APEX	Malicious
Avast	Win64:BankerX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Banker.Win32.IcedID.txgh
BitDefender	Trojan.GenericKDZ.75201
MicroWorld-eScan	Trojan.GenericKDZ.75201
Ad-Aware	Trojan.GenericKDZ.75201
Sophos	ML/PE-A + Troj/IcedID-Z
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Trojan-FTQA!C78DB2C6C463
FireEye	Generic.mg.c78db2c6c4637d58
Emsisoft	Trojan.GenericKDZ.75201 (B)
Jiangmin	Trojan.Banker.IcedID.vi
Avira	TR/Kryptik.tqtdf
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Trojan.Win64.Agent.oa!s1
GData	Trojan.GenericKDZ.75201
AhnLab-V3	Trojan/Win.Agent.R420722
McAfee	Artemis!C78DB2C6C463
MAX	malware (ai score=87)
Malwarebytes	Trojan.IcedID
Rising	Trojan.Kryptik!8.8 (TFE:dGZlOgUw8TiGgRToPg)
Fortinet	W64/Kryptik.CKZ!tr
AVG	Win64:BankerX-gen [Trj]

How to remove Win64/Kryptik.CKZ?

Win64/Kryptik.CKZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X