SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167

Classification: Malicious

SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167 is a malicious file sample. Reported by 2 threat sources, last seen 2024-05-18.

Detection summary

  • 78 antivirus detections
  • 1 IDS alerts
  • 19 processes observed
  • 1 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-05-18 00:30:04 2024-05-18 02:00:15
GCleaner MalwareBazaar Abuse.ch 2024-05-18 00:22:25 2024-05-18 00:22:25 malicious-activity

Sample information

Filenames
SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
285696 bytes
MD5
4d0d9540d30d01d99421c519ccfd794a
SHA-1
294ee86e7e75c69e6591ac83c357a5749e0c62c7
SHA-256
35a4bc4b2f81c2e4ddeb9655e4d8141649bb5ab42a7014d46bea72fe9e61ab78
First indexed
2024-05-18 00:23:03
Last updated
2026-09-03 00:29:28

Antivirus detections

EngineDetection
APEXMalicious
AVGCrypterX-gen [Trj]
AlibabaTrojan:Win32/Raccoon.cc716145
AvastCrypterX-gen [Trj]
AviraTR/Crypt.XPACK.Gen4
BitDefenderThetaGen:NN.ZexaF.36804.ru0@aatPH9gG
BkavW32.AIDetectMalware
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
F-SecureTrojan.TR/Crypt.XPACK.Gen4
FireEyeGeneric.mg.4d0d9540d30d01d9
FortinetW32/Kryptik.HCOV!tr
GoogleDetected
GridinsoftMalware.Win32.Gen.tr
IkarusTrojan.Win32.Raccoon
KasperskyUDS:Trojan-PSW.Win32.Tepfer.gen
KingsoftWin32.PSWTroj.Undef.a
LionicTrojan.Win32.Tepfer.i!c
MalwarebytesGeneric.Malware/Suspicious
MaxSecureTrojan.Malware.300983.susgen
McAfeeArtemis!4D0D9540D30D
MicrosoftTrojan:Win32/Wacatac.B!ml
Paloaltogeneric.ml
Rising[email protected] (RDML:qxrJi4yo4KzxdCLUvWf47Q)
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.PWSZbot.dh
SophosTroj/Krypt-AEE
SymantecML.Attribute.HighConfidence
Trapminemalicious.high.ml.score
VirITTrojan.Win32.Stealc.A
ZoneAlarmUDS:Trojan-PSW.Win32.Tepfer.gen
tehtrisGeneric.Malware
ALYacGen:Variant.Midie.148075
AVGWin32:CrypterX-gen [Trj]
AhnLab-V3Trojan/Win.Generic.R648680
AlibabaTrojanPSW:Win32/Tepfer.f7ead5cd
Antiy-AVLTrojan/Win32.Kryptik.hwzf
ArcabitTrojan.Midie.D2426B
AvastWin32:CrypterX-gen [Trj]
BitDefenderGen:Variant.Midie.148075
BitDefenderThetaGen:NN.ZexaF.36808.ru0@aatPH9gG
ClamAVWin.Packed.Fareit-10030127-0
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.0d30d0
CylanceUnsafe
DrWebTrojan.DownLoader46.63821
ESET-NOD32a variant of Win32/Kryptik.HXBU
EmsisoftGen:Variant.Midie.148075 (B)
FortinetW32/Kryptik.HXBV!tr
GDataGen:Variant.Midie.148075
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
KasperskyHEUR:Trojan-PSW.Win32.Tepfer.gen
Kingsoftmalware.kb.a.997
MAXmalware (ai score=84)
MalwarebytesTrojan.MalPack.GS
MaxSecureTrojan.Malware.6071356.susgen
McAfeeDReal Protect-LS!4D0D9540D30D
MicroWorld-eScanGen:Variant.Midie.148075
MicrosoftTrojan:Win32/SmokeLoader.RXE!MTB
NANO-AntivirusTrojan.Win32.Kryptik.knfypr
PandaTrj/Chgt.AD
RisingStealer.Tepfer!8.13357 (CLOUD)
SUPERAntiSpywareTrojan.Agent/Gen-Tepfer
SangforInfostealer.Win32.Kryptik.V2x7
SkyhighBehavesLike.Win32.Lockbit.dh
TencentMalware.Win32.Gencirc.140c3428
TrendMicroTrojan.Win32.AMADEY.YXEERZ
TrendMicro-HouseCallTrojan.Win32.AMADEY.YXEERZ
VBA32TrojanDownloader.Ajent
VIPREGen:Variant.Midie.148075
VaristW32/Kryptik.MGE.gen!Eldorado
ZillyaTrojan.Kryptik.Win32.4788851
ZoneAlarmHEUR:Trojan-PSW.Win32.Tepfer.gen
alibabacloudTrojan[stealer]:Win/Tepfer.gyf

Network contacts

185.172.128.90

Process list

NameCommand line
SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167.exe
WerFault.exe-u -p 2988 -s 548
WerFault.exe-u -p 2988 -s 548
WerFault.exe-u -p 2988 -s 852
WerFault.exe-u -p 2988 -s 860
WerFault.exe-u -p 2988 -s 860
WerFault.exe-u -p 2988 -s 888
WerFault.exe-u -p 2988 -s 1344
WerFault.exe-u -p 2988 -s 1344
cmd.exe/c taskkill /im "SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167.exe" /f & erase "C:\SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167.exe" & exit
taskkill.exetaskkill /im "SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167.exe" /f
WerFault.exe-pss -s 440 -p 2988 -ip 2988
WerFault.exe-pss -s 508 -p 2988 -ip 2988
WerFault.exe-pss -s 504 -p 2988 -ip 2988
WerFault.exe-pss -s 504 -p 2988 -ip 2988
WerFault.exe-pss -s 504 -p 2988 -ip 2988
WerFault.exe-pss -s 504 -p 2988 -ip 2988
WerFault.exe-pss -s 532 -p 2988 -ip 2988
WerFault.exe-pss -s 504 -p 2988 -ip 2988