| K7 Detection Name | Affected OS | Prevalence | AV Definition Version |
|---|---|---|---|
| Trojan ( 005a64791 ) | Windows | Low | 12.93.48744 |
| MD5 | 7420ea98389b62b6b5b84afbe9c76483 |
| SHA256 | 059c83df4a5e6c7a5de9e681465436478fde86d63c81d7d3849f588d5c80f397 |
| File Size | 549,376 bytes |
| Packer Information | N/A |
| First Seen | 24-06-2023 |
| Last Seen | 17-04-2024 |
| Aliases | MSIL/Kryptik.AIYZ |
Behavior Details
1. Dropped files:
WRITABLE.TST
MAPPING1.MAP
MAPPING2.MAP
MAPPING3.MAP
OBJECTS.DATA
INDEX.BTR
Under the folder
C:\Windows\sysnative\wbem\repository
Removal Instructions
1. Update the copy of K7 security to the latest version. 2. Scan the system completely and remove the detected files. 3. Restart the machine.