HackTool:Win32/CobaltStrike!pz information

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:
name: 46B987B8959BF1B627DA.mlw
path: /opt/CAPEv2/storage/binaries/548b37448c8182548a32d190e8aa6178b862a6465914fb5e00fcd661fdc80315
crc32: 0545B593
md5: 46b987b8959bf1b627da06ba71006293
sha1: d40ba0d53712d7717ffd4e82c9631ccc9447d019
sha256: 548b37448c8182548a32d190e8aa6178b862a6465914fb5e00fcd661fdc80315
sha512: 172351012f2a41bbe4786b7206defabbbd206167521c4a9c2fd6f9b6f6a81513da6d4b16ffdc345b71e2e61e4b78500a95b7819ce07a8f113dbff4ff1c01298f
ssdeep: 12288:wqBF6oVTk26GF15CUqbGuC4DCNlkwv9plDqdlwMkPX5q5cj:vBF6727F15qbruNv9TslC5w2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T120D4E090DE6B50F5E60B6130946BA77F562226090F38EDCBC7C40E86E797FF1013696A
sha3_384: 74c0d5c2f8b8387c60f4594132854c1003210799a14c435b0074efdf65f5e48b68c3709fa20a36263302a3b5d324b5fe
ep_bytes: 5045715a4e47426244714f506a4a4f51
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

Bkav	W32.AIDetectMalware
Skyhigh	BehavesLike.Win32.Generic.hh
McAfee	GenericRXNR-AT!46B987B8959B
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
Symantec	Packed.Generic.551
Cynet	Malicious (score: 100)
APEX	Malicious
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
Sophos	Troj/Miner-ABH
DrWeb	Trojan.PWS.Banker1.30278
FireEye	Generic.mg.46b987b8959bf1b6
SentinelOne	Static AI – Malicious PE
Varist	W32/S-8f4e9221!Eldorado
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	malware.kb.a.965
Xcitium	TrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
Microsoft	HackTool:Win32/CobaltStrike!pz
GData	Win32.Trojan.Agent.XZXZJ3
Google	Detected
AhnLab-V3	Trojan/Win32.Banload.C3470781
Acronis	suspicious
VBA32	TrojanPSW.Banker
Rising	Trojan.Generic@AI.100 (RDML:8NYYhWpgkbhZz80msan0vw)
Ikarus	Trojan.Win64.CoinMiner
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.7267!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X