Crack

How to remove “HackTool:Win32/CobaltStrike!pz”?

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: 63614ADD609FB8940654.mlw
path: /opt/CAPEv2/storage/binaries/9fc3bf82dd89542c834577ac7532a2f7268e006d4bb1ab191d556576347b9fd0
crc32: C0CBB4E6
md5: 63614add609fb89406543017e964d911
sha1: 6bab9fa8edf8fcb8cc987cafd6dd4482b9e485cd
sha256: 9fc3bf82dd89542c834577ac7532a2f7268e006d4bb1ab191d556576347b9fd0
sha512: f7b0539bb17297fd2f476acbccfc60b00a9dd95dad9abde79d5ddfbb2471ac8fed082582001f86ec847bbb72ce06ad223f002bc1351a11d03fe9594114ce0484
ssdeep: 24576:vBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcW7wpebBQLn2IBP3WKd:r56uL3pgrCEdMKPFoLqH7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BC65FAA0EEEF00F4EA035870955BA23F5721270A9B38DDD7C6841E82D677EF25533926
sha3_384: 081c37576211f6d2737a0a01bf76c8af42ab39bb60bb7ec4beb9ac70c3349c7b4fcff1acd71785a94965607cbad6012b
ep_bytes: 83ec0c8b44240c8d5c24108944240489
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45989870
ClamAVWin.Trojan.Razy-7331646-0
FireEyeGeneric.mg.63614add609fb894
SkyhighBehavesLike.Win32.Generic.th
McAfeeGenericRXNR-AT!63614ADD609F
MalwarebytesGeneric.Malware.AI.DDS
ZillyaDownloader.Banload.Win32.88671
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
SymantecPacked.Generic.551
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKD.45989870
NANO-AntivirusTrojan.Win32.Banker1.inibrb
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
EmsisoftTrojan.GenericKD.45989870 (B)
DrWebTrojan.PWS.Banker1.30278
VIPRETrojan.GenericKD.45989870
SophosTroj/Miner-ABA
IkarusTrojan.Win64.CoinMiner
GDataTrojan.GenericKD.45989870
JiangminTrojan.Pushel.c
GoogleDetected
Antiy-AVLTrojan/Win32.AGeneric
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
ArcabitTrojan.Generic.D2BDBFEE
MicrosoftHackTool:Win32/CobaltStrike!pz
VaristW32/S-8f4e9221!Eldorado
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
ALYacTrojan.GenericKD.45989870
MAXmalware (ai score=88)
RisingTrojan.Generic@AI.87 (RDMK:tjLZt8jSB20vybEJQ9nBUw)
SentinelOneStatic AI – Malicious PE
FortinetW32/Agent.7267!tr
DeepInstinctMALICIOUS

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Crack

HackTool:Win32/CobaltStrike!pz removal

Malware Removal

The HackTool:Win32/CobaltStrike!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/CobaltStrike!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool:Win32/CobaltStrike!pz?


File Info:

name: D191089B60F648B399A5.mlw
path: /opt/CAPEv2/storage/binaries/2861e98924062828c50a0248d496aceb574c4f9b4cb43bf5a13df1f36d2a7983
crc32: 773AED17
md5: d191089b60f648b399a56cbca155258d
sha1: 9aaf4ce93f1cc0331685b607efaae634dd13c5f6
sha256: 2861e98924062828c50a0248d496aceb574c4f9b4cb43bf5a13df1f36d2a7983
sha512: 2fdc2b20a7bd5dd5e5d7bc427149e699746bed93691ac11bf49458d01624ed2a61b09360a716643c20d8c20a296f38f470b8137c9dfce8c7bab33c02ebf58a40
ssdeep: 12288:wqBF6oVTk26G+Cr8WCKM66UMe6TlaY3Wn0:vBF6727vrNaT/g0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T195A4CF95CDAB50F4E60BA530945BA63F962227091F38DDDBC7C40E86E367EF1103297A
sha3_384: 2a94b54cfa7915a76aaaf918180fb4da8930f319a694bf7a558ead2b3d8fede86ab108a2788a2042909078c8a188aa55
ep_bytes: 4b4d4553786f65557056674661577a70
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/CobaltStrike!pz also known as:

BkavW32.AIDetectMalware
ClamAVWin.Malware.Eati-7331639-0
SkyhighBehavesLike.Win32.Generic.gh
McAfeeGenericRXNR-AT!D191089B60F6
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.a
SymantecPacked.Generic.551
CynetMalicious (score: 100)
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
DrWebTrojan.PWS.Banker1.30278
FireEyeGeneric.mg.d191089b60f648b3
SophosTroj/Miner-ABH
IkarusTrojan.Win64.CoinMiner
GDataWin32.Trojan.Agent.G3M7DE
GoogleDetected
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.939
XcitiumTrojWare.Win32.TrojanDownloader.Banload.RES@8hfp75
MicrosoftHackTool:Win32/CobaltStrike!pz
VaristW32/S-8f4e9221!Eldorado
AhnLab-V3Trojan/Win32.Banload.C3470781
Acronissuspicious
VBA32TrojanPSW.Banker
RisingHackTool.CobaltStrike!8.1216E (TFE:4:4BhO8kfUKzS)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.7267!tr
CrowdStrikewin/malicious_confidence_100% (D)

How to remove HackTool:Win32/CobaltStrike!pz?

HackTool:Win32/CobaltStrike!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment