Crack

How to remove “HackTool:Win32/CobaltStrike!pz”?

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: 206C3AC10E7108E9A2AF.mlw
path: /opt/CAPEv2/storage/binaries/0ac1c7f9d49e58269b655e92c086bf2289c1b30dd87595c29e119e402a7077fe
crc32: EC050AC8
md5: 206c3ac10e7108e9a2af5e9bec1245f7
sha1: daba9682c3c359caf62605c49c0d0d9a09ffc97f
sha256: 0ac1c7f9d49e58269b655e92c086bf2289c1b30dd87595c29e119e402a7077fe
sha512: 2ea84684a14ff0737f4e8e71b93202e05c94866e44425e99184adcd800901acbb7c60ad63fcd5ba0d74620b3f085b2dc0974809cc0e87a94291e0de098df1004
ssdeep: 12288:wqBF6oVTk26GX+2wRke2SYwP7D3JOL01xWeS1uOuYfEfFl4pQca39owEYr+GgcE:vBF6727Zvhwo01xDS1ud7fH4pY7EG8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DEF4F140CEAB54F4D6075174582FA72FA622274A1F38EDCBC3C40E86D76AFF1117296A
sha3_384: 79bd10cc19287e1066e83a67150f1169006b244b9b9a41573f6db9b2c906543f58a7bc153afc4d5a15ccc28466b31baa
ep_bytes: 6f47624a4748656f7666764543435650
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
FireEyeGeneric.mg.206c3ac10e7108e9
SkyhighBehavesLike.Win32.Generic.bh
McAfeeGenericRXNR-AT!206C3AC10E71
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
SymantecPacked.Generic.551
APEXMalicious
ClamAVWin.Trojan.Coinminer-7332747-0
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
DrWebTrojan.PWS.Banker1.30278
SophosTroj/Miner-ABH
IkarusTrojan.Win64.CoinMiner
GDataWin32.Trojan.Agent.9BZR8R
VaristW32/S-8f4e9221!Eldorado
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.967
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
MicrosoftHackTool:Win32/CobaltStrike!pz
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
RisingHackTool.CobaltStrike!8.1216E (TFE:3:rrmzPDyxX0H)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.7267!tr
DeepInstinctMALICIOUS

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Crack

HackTool:Win32/CobaltStrike!pz removal instruction

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: 6BFE4E98BBD1D003B424.mlw
path: /opt/CAPEv2/storage/binaries/f63cb7bb432d851a06cee642f6604b955c19dd87035b754e6655a638c069e3e3
crc32: 341D0988
md5: 6bfe4e98bbd1d003b424243a5c7d7f13
sha1: e33b664401411806a390f386c9d1682a13465053
sha256: f63cb7bb432d851a06cee642f6604b955c19dd87035b754e6655a638c069e3e3
sha512: e3837e3bf5f2e9f29aa71ce2fc83c9d61d47679137149b19e4b77ed6e3207140cf5e0a5b75e31913389c47067ee846b6aa9188bbbf755a38199c870016de1b47
ssdeep: 24576:vBF6727f8UhNnXIhz24GtdhUYpAal4jZnwMWmzyh5sjnBO0dsC:rUUvXjVTXptRmKWDx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15A250291DEAB24F4D60B6174642FA76F9A1226050F38ECCBD3C00D8AE767FF12136566
sha3_384: 40a79d38a10b7b484dd59ed1270ceb4c682cfb57a58753fbdbd3fc27a0ef200ea5cd964674724a328df296bc880ec2e4
ep_bytes: 627755446b486a5a566550484e594248
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
ClamAVWin.Trojan.Razy-7331678-0
FireEyeGeneric.mg.6bfe4e98bbd1d003
SkyhighBehavesLike.Win32.Generic.th
McAfeeGenericRXNR-AT!6BFE4E98BBD1
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
SymantecPacked.Generic.551
APEXMalicious
CynetMalicious (score: 100)
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
DrWebTrojan.PWS.Banker1.30278
SophosTroj/Miner-ABH
IkarusTrojan.Win64.CoinMiner
GDataWin32.Trojan.Agent.VX57P4
GoogleDetected
Antiy-AVLTrojan/Win32.AGeneric
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
MicrosoftHackTool:Win32/CobaltStrike!pz
VaristW32/S-8f4e9221!Eldorado
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
RisingHackTool.CobaltStrike!8.1216E (TFE:3:9ER1rxEHsoO)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.7267!tr
DeepInstinctMALICIOUS

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment