Win64/Kryptik.CRI information

The Win64/Kryptik.CRI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Kryptik.CRI virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to modify proxy settings

How to determine Win64/Kryptik.CRI?

File Info:
name: BA6633096B154755EDD0.mlw
path: /opt/CAPEv2/storage/binaries/23515bd55879fdbbd12c88729c2954e774a7d41a97cb83634a28d1b96741b671
crc32: FDA31194
md5: ba6633096b154755edd099b312836868
sha1: a5839553a6f7c44932acf826060a87fdcc9f99f9
sha256: 23515bd55879fdbbd12c88729c2954e774a7d41a97cb83634a28d1b96741b671
sha512: 6779db39169e75626ee26a89c894d991e6079b86d46515837a08c601d22d7d815c3e88a8c971743730525c49e0f41e250e59210ec3bc5466ef93325d691a581d
ssdeep: 1536:n5KI+x2EVnhpHMQ4pJ340kIt5KLU7XocR+goW5:5tmnhpk93u+XoT9
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1C9530293C72B24FCDD3F823199B531A5ABE18A2D3DDEE74B4E6205CD730094C950B6A9
sha3_384: f9352459e9cec5308f14de2c9858997d8f8ef8b65f27a99bea81f0e43b3de3c8ef340cd88941c11e0a8089e85f3535c2
ep_bytes: 53565755488d355a12ffff488dbedb1f
timestamp: 2021-11-17 06:40:37

Version Info:
0: [No Data]

Win64/Kryptik.CRI also known as:

How to remove Win64/Kryptik.CRI?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.