Crack

Should I remove “HackTool:Win32/CobaltStrike!pz”?

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Binary file triggered YARA rule

How to determine HackTool:Win32/CobaltStrike!pz?



File Info:

name: 1592BB3046A99760E866.mlw
path: /opt/CAPEv2/storage/binaries/d903eefbb823fcecb72c2327c7f8b9c603484bd97b8d3016b8339263a4f865ac
crc32: 01C84028
md5: 1592bb3046a99760e866293c332ab02c
sha1: b7eee35bee86686226aa4b1bf9c14c92b211f539
sha256: d903eefbb823fcecb72c2327c7f8b9c603484bd97b8d3016b8339263a4f865ac
sha512: c4a408a9c38c5a7d86e055846cefdb19a871f3d45f4df7737f078434fe55cab5e00ac2654524d369808b76b184a96ac3166fdc3e474bde4760fa246dcf3985d7
ssdeep: 24576:vBF6727ZvhwoONE6phFrMiBsQVWGoPN966xBttE:rFD2P6QV8Ncj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EF250161CEAB15F5C7176030546BAB3F672226090F38DDCBC3D40E47D76AEE21136A6A
sha3_384: 548a6f24416233e529f18acd419d854fe1da868bcc983db81e7beb2f7a5629eb0a950ef78eed2ab1313dc9e27c2af38f
ep_bytes: 6f47624a4748656f7666764543435650
timestamp: 1970-01-01 00:00:00


Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
FireEyeGeneric.mg.1592bb3046a99760
SkyhighBehavesLike.Win32.Generic.dh
McAfeeGenericRXNR-AT!1592BB3046A9
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
SymantecPacked.Generic.551
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Coinminer-7332747-0
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
SophosTroj/Miner-ABH
DrWebTrojan.PWS.Banker1.30278
SentinelOneStatic AI – Malicious PE
VaristW32/S-8f4e9221!Eldorado
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftHackTool:Win32/CobaltStrike!pz
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
GDataWin32.Trojan.Agent.M1DLS2
GoogleDetected
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
RisingHackTool.CobaltStrike!8.1216E (TFE:3:rrmzPDyxX0H)
IkarusTrojan.Win64.CoinMiner
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.7267!tr
alibabacloudTrojan:Win/CoinMiner.UXW

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Crack

How to remove “HackTool:Win32/CobaltStrike!pz”?

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Binary file triggered YARA rule

How to determine HackTool:Win32/CobaltStrike!pz?



File Info:

name: 203AFB15979666779D31.mlw
path: /opt/CAPEv2/storage/binaries/6a8b78c92edddb677a38ed45d0bb1a5c58954847d3af6d73eae9ac3aaff4cab5
crc32: 3C163357
md5: 203afb15979666779d3152f4207cb658
sha1: 9832a18eefd5f0d079a31bdc38747f71a1fb6289
sha256: 6a8b78c92edddb677a38ed45d0bb1a5c58954847d3af6d73eae9ac3aaff4cab5
sha512: 61c7a766a9e726cdd713f6d72afa44016e49d2fa2fd52896151b744f93edcb1cac1595e54e62a51d6eeff3ca46e25ab4f2eebf6f9bbbe75df6b9a32335f3b740
ssdeep: 24576:vBWelxqsfNMNr79DsIMDlTovQ30m73Bm0:8FGkv4N7xJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D3052342EE6E88BEC749167D19BF4BCF125219404318EAD3E7D66E96C64EBDA043313C
sha3_384: c39d8ec16301ce4f0b74c0b9915bd07a9a5edf6549cf949a9f750c0f41c7aea982a3093f8c55103bbc147b218a18ffce
ep_bytes: 7a59766e70706c5661645848556b7258
timestamp: 1970-01-01 00:00:00


Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Banload.4!c
MicroWorld-eScanGen:Variant.Ulise.267041
FireEyeGeneric.mg.203afb1597966677
SkyhighBehavesLike.Win32.Generic.cm
McAfeeArtemis!203AFB159796
SangforSuspicious.Win32.Save.a
Cybereasonmalicious.597966
SymantecPacked.Generic.551
CynetMalicious (score: 100)
ClamAVWin.Trojan.Banload-9853585-0
BitDefenderGen:Variant.Ulise.267041
NANO-AntivirusTrojan.Win32.Miner.jeccbt
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
SophosTroj/Miner-ABM
DrWebTrojan.PWS.Banker1.30278
VIPREGen:Variant.Ulise.267041
EmsisoftGen:Variant.Ulise.267041 (B)
SentinelOneStatic AI – Malicious PE
VaristW32/S-8f4e9221!Eldorado
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.993
MicrosoftHackTool:Win32/CobaltStrike!pz
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
ArcabitTrojan.Ulise.D41321
GDataGen:Variant.Ulise.267041
GoogleDetected
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
ALYacGen:Variant.Ulise.267041
MAXmalware (ai score=84)
VBA32TrojanPSW.Banker
MalwarebytesGeneric.Malware.AI.DDS
RisingTrojan.Generic@AI.100 (RDML:o3Webi9peY/fxSU5Nx2zxA)
IkarusTrojan.Win64.CoinMiner
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Banload.BD2A!tr
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)
alibabacloudTrojan:Win/CoinMiner.UXW

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment