Kryptex.exe threat report

MD5 53314738aa64d8b5e2e97a64e21c068a
Latest seen 2024-04-07 23:02:06 (2 years ago)
First seen 2024-04-07 23:02:06 (2 years ago)
Size 130 MB
Publisher Kryptex
Product Kryptex

This report summarizes the file identity, detection status, publisher metadata, observed locations, and technical indicators for Kryptex.exe. ThreatInfo currently classifies this sample as Trojan.CoinMiner.

GridinSoft Anti-Malware detection

GridinSoft already detects this file

The latest ThreatInfo record shows Kryptex.exe detected as Trojan.CoinMiner. You can download GridinSoft Anti-Malware to scan the system and remove this detection if the file is present on your device.

Detection name
Trojan.CoinMiner
Last analysis
2024-04-07 23:02:06 (2 years ago)
File hash
53314738aa64d8b5e2e97a64e21c068a
Download Anti-Malware

Kryptex.exe is a Windows file recorded in the ThreatInfo database. It is associated with Kryptex. The reported company name is Kryptex. The current detection status is Trojan.CoinMiner, based on the latest analysis from 2024-04-07 23:02:06 (2 years ago).

If Kryptex.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.CoinMiner.

Product Name: Kryptex
Company Name: Kryptex
MD5: 53314738aa64d8b5e2e97a64e21c068a
Size: 130 MB
First Published: 2024-04-07 23:02:06 (2 years ago)
Latest Published: 2024-04-07 23:02:06 (2 years ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2024-04-07 23:02:06 (2 years ago)
Kryptex.exe detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Signed By: xBlock Ventures OÜ
Status: Valid

The signature on Kryptex.exe is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%programfiles%

ThreatInfo has observed Kryptex.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Spain with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for Kryptex.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

Kryptex.exe is identified as pe for 64 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0381bc20

PE Sections:

Name Size of data MD5
.text 111621120 8bbaa36ec919c80db977f70dcd2789a1
.rdata 20222464 417554231a5270d8e401d9bfd80aac94
.data 493568 fcf36211fd67877dae8c7de0cd824698
.pdata 3560960 beb73bee0e76831bce28d99ebc13e510
.00cfg 512 3fb9294e9f94de6715b9e97b5708c13f
.retplne 512 7a1b7754bbb5658c6826035106303d20
.rodata 4608 ab87d2e8f7e7a40ee320b1ce20d19e20
.tls 1024 3540e4fa9ead49b55e3604a8b9ec6d37
CPADinfo 512 60d3ea61d541c9be2e845d2787fb9574
_RDATA 512 52d1d677cb9f57b70d409bbf9573ea1f
.rsrc 108544 41290cf8722f25fbe8474325b0f3403a
.reloc 906752 da7f269a4772ecae1d0aac793907f9e2

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: