Should I remove “HackTool.CobaltStrike”?

The HackTool.CobaltStrike is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool.CobaltStrike virus can do?

Presents an Authenticode digital signature

How to determine HackTool.CobaltStrike?


File Info:
crc32: 3416D893
md5: 45ed8898bead32070cf1eb25640b414c
name: upload_file
sha1: dd77cee3d418a6462b2e31fabc76510b8f2320d5
sha256: 836db6bde6f664fa42b020c7b4549713022eac87410c1ed1104b6d4df615a599
sha512: 114768ff3dcf4837bbe79e92ba3e694ede12673ed9913d09fcbc007fbce0d4d6714f9a870a9010fee9fc5a22307a668edee784a5521a97f28c20c738a35fa582
ssdeep: 6144:dG+hzs3xTAC9Qw2bZV0dHRH2HzHoHdHyHK:dG+ABAC9QqxWTI9Sq
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

HackTool.CobaltStrike also known as:

MicroWorld-eScan	Trojan.GenericKD.34851196
FireEye	Trojan.GenericKD.34851196
ALYac	Trojan.Shelma.gen
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win64.Shelma.4!c
K7AntiVirus	Trojan-Downloader ( 0056b3281 )
BitDefender	Trojan.GenericKD.34851196
K7GW	Trojan-Downloader ( 0056b3281 )
TrendMicro	TROJ_FRS.VSNTJL20
Symantec	Trojan.Maltrec.TS
ESET-NOD32	Win32/TrojanDownloader.Injector.AA
TrendMicro-HouseCall	TROJ_FRS.VSNTJL20
Avast	Win64:Malware-gen
Kaspersky	Trojan.Win64.Shelma.gcf
Alibaba	TrojanDownloader:Win64/Shelma.98a4de0a
ViRobot	Trojan.Win32.Z.Shelma.677344
Ad-Aware	Trojan.GenericKD.34851196
Sophos	Mal/Generic-S
Comodo	Malware@#2e5pze6rjp9n4
F-Secure	Trojan.TR/Shelma.dypnt
DrWeb	Trojan.Encoder.32909
Invincea	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	MalCert-S.CV (A)
Webroot	W32.Ransom.Ryuk
Avira	TR/Shelma.dypnt
Microsoft	Trojan:Win32/Ymacco.AA83
Arcabit	Trojan.Generic.D213C97C
AhnLab-V3	Trojan/Win64.Ryukran.R353616
ZoneAlarm	Trojan.Win64.Shelma.gcf
GData	Win32.Trojan-Downloader.Injector.MX4FJ4
McAfee	Artemis!45ED8898BEAD
MAX	malware (ai score=100)
Malwarebytes	HackTool.CobaltStrike
Panda	Trj/CI.A
Ikarus	Trojan-Spy.Agent
Fortinet	PossibleThreat.MU
MaxSecure	Trojan.Malware.108966059.susgen
AVG	Win64:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win64/Trojan.841

How to remove HackTool.CobaltStrike?

HackTool.CobaltStrike removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X