Crack

HackTool:Win32/CobaltStrike!pz (file analysis)

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: 5A3AECD68A586C31C9C0.mlw
path: /opt/CAPEv2/storage/binaries/6a7249546c1343e86935781830a7b8686da8b4f94f8c87db3e84f788104ae0b7
crc32: CA9AF29B
md5: 5a3aecd68a586c31c9c020035e6f0f0e
sha1: 9a6d079ab1bffa6015bf5f1b05d7f50fd08c6667
sha256: 6a7249546c1343e86935781830a7b8686da8b4f94f8c87db3e84f788104ae0b7
sha512: 5c245276dbc79355eac9aefe30ab3c8b5c269372583a4e23f2dfa73a9bbeb16d94b19cdbb32594534fca951cb8090d108c85f84f8e2529e96a6369fc265caa1c
ssdeep: 12288:wqBF6oVTk26G+Cr8WCKM66UMe6TlaY3Wj2KlUBfyjcOxAa186tg:vBF6727vrNaT/lKltcOma18F
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D8E4F195CEAB50F4D60B6134A45BA73F962127095F38DDCBC7C40D8AD36AEF1203297A
sha3_384: be6e8c29b18407e990da632d163fd4dee1f61aef3bfb785875b61d0392e1f89f1308a410afc497f09ab1fbcaaef0a7c4
ep_bytes: 4b4d4553786f65557056674661577a70
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
ClamAVWin.Malware.Eati-7331639-0
SkyhighBehavesLike.Win32.Generic.jh
McAfeeGenericRXNR-AT!5A3AECD68A58
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
SymantecPacked.Generic.551
APEXMalicious
CynetMalicious (score: 100)
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
RisingHackTool.CobaltStrike!8.1216E (TFE:4:4BhO8kfUKzS)
DrWebTrojan.PWS.Banker1.30278
SophosTroj/Miner-ABH
SentinelOneStatic AI – Malicious PE
GoogleDetected
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.965
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
MicrosoftHackTool:Win32/CobaltStrike!pz
GDataWin32.Trojan.Agent.J1CNVU
VaristW32/S-8f4e9221!Eldorado
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
IkarusTrojan.Win64.CoinMiner
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.7267!tr
CrowdStrikewin/malicious_confidence_100% (W)

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment