Crack

HackTool:Win32/CobaltStrike!pz information

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: 892E1006BF5BC7B79373.mlw
path: /opt/CAPEv2/storage/binaries/885b13092ff82de4270e856eb522246552d765a20bdd6e65d441ad07736d03bb
crc32: D174244D
md5: 892e1006bf5bc7b79373ed56eae18321
sha1: 322dcb1a28682f7ef018140599cd105936fa59ad
sha256: 885b13092ff82de4270e856eb522246552d765a20bdd6e65d441ad07736d03bb
sha512: 27825a2d9a9b6b90acb2262e55676135cc5285d7e0861673b4af4019448a879a2160dd5468d53bbdff03426c1884072d8fb982a2b79bbe060f99e71996a33cb1
ssdeep: 24576:vBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMaMYXocnkVoFwk3sLbcICpkYyw6:r56uL3pgrCEd2hXnngk0cIC6iNC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T176658EA0DDEF10F0EA079870955BA23F5225270A9F38DDCBC6841E82D677EF1153396A
sha3_384: 4c88d7d53591d72376e209bb3f40c016d83a252851b241a66906b43ac395e2dfde14ab75668243a2fbe5f8ff4fa2b3db
ep_bytes: 83ec0c8b44240c8d5c24108944240489
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
DrWebTrojan.PWS.Banker1.30278
MicroWorld-eScanTrojan.GenericKD.45989870
ClamAVWin.Trojan.Razy-7331674-0
FireEyeGeneric.mg.892e1006bf5bc7b7
SkyhighBehavesLike.Win32.Generic.th
McAfeeGenericRXNR-AT!892E1006BF5B
MalwarebytesGeneric.Malware.AI.DDS
ZillyaDownloader.Banload.Win32.88671
SangforTrojan.Win32.Save.a
SymantecPacked.Generic.551
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKD.45989870
NANO-AntivirusTrojan.Win32.Banker1.inibrb
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
EmsisoftTrojan.GenericKD.45989870 (B)
VIPRETrojan.GenericKD.45989870
SophosTroj/Miner-ABH
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKD.45989870
JiangminTrojan.Pushel.c
GoogleDetected
MAXmalware (ai score=82)
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.831
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
ArcabitTrojan.Generic.D2BDBFEE
MicrosoftHackTool:Win32/CobaltStrike!pz
VaristW32/S-8f4e9221!Eldorado
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
ALYacTrojan.GenericKD.45989870
TrendMicro-HouseCallTROJ_GEN.R03BH0CC124
RisingTrojan.Generic@AI.100 (RDML:1z7aVdU3R5K15Cx0S+8jiw)
IkarusTrojan.Win64.CoinMiner
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.7267!tr
CrowdStrikewin/malicious_confidence_100% (D)

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Crack

HackTool:Win32/CobaltStrike!pz removal

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: DFC4355F9FD358D6BB8C.mlw
path: /opt/CAPEv2/storage/binaries/2e8334b58e31e1990b9d5d97a0b18cd57c3ac99281f90deba596654ac8b79dc5
crc32: E28F6784
md5: dfc4355f9fd358d6bb8c12097e86127d
sha1: 9c127716f9865d11c2b07a6b8d4fe3f672a20b36
sha256: 2e8334b58e31e1990b9d5d97a0b18cd57c3ac99281f90deba596654ac8b79dc5
sha512: d6250ba2f18622625e3ba4832e067d99f4a2733f846f5b4b8a4cf8308a1a5c0623632e2447efc871a6662d6aaa942a188e6b1eaf2a7f8aa9ce30ff7f0d10eb78
ssdeep: 24576:vBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMaMYXoFR/s7bvp9vDmMB5Wi:r56uL3pgrCEd2hXe/s7HvDzWi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157759FA0DDEF10F0EA079870956BA23F5225271A5F38DDCBC6841E82D677EF1153392A
sha3_384: 6f57d26223e9b440ba7e89049c69e85d068262cf429808e250674fc6dc142143b82f171672c6961fc03182269247b05e
ep_bytes: 83ec0c8b44240c8d5c24108944240489
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45989870
ClamAVWin.Trojan.Razy-7331680-0
FireEyeGeneric.mg.dfc4355f9fd358d6
SkyhighBehavesLike.Win32.Generic.th
McAfeeGenericRXNR-AT!DFC4355F9FD3
MalwarebytesGeneric.Malware.AI.DDS
ZillyaDownloader.Banload.Win32.88671
SangforTrojan.Win32.Save.a
ArcabitTrojan.Generic.D2BDBFEE
SymantecPacked.Generic.551
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKD.45989870
NANO-AntivirusTrojan.Win32.Banker1.inibrb
RisingTrojan.Generic@AI.100 (RDML:1z7aVdU3R5K15Cx0S+8jiw)
SophosTroj/Miner-ABH
DrWebTrojan.PWS.Banker1.30278
VIPRETrojan.GenericKD.45989870
EmsisoftTrojan.GenericKD.45989870 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Pushel.c
GoogleDetected
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.855
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
MicrosoftHackTool:Win32/CobaltStrike!pz
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
GDataTrojan.GenericKD.45989870
VaristW32/S-8f4e9221!Eldorado
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
ALYacTrojan.GenericKD.45989870
MAXmalware (ai score=81)
TrendMicro-HouseCallTROJ_GEN.R03BH0CC124
IkarusTrojan.Win64.CoinMiner
FortinetW32/Agent.7267!tr
CrowdStrikewin/malicious_confidence_100% (D)

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment