How to remove “HackTool:Win64/CobaltStrike.B”?

The HackTool:Win64/CobaltStrike.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win64/CobaltStrike.B virus can do?

How to determine HackTool:Win64/CobaltStrike.B?


File Info:
crc32: 75CB58D1
md5: bc055968569f6edba24a9fe62f51a8ad
name: BC055968569F6EDBA24A9FE62F51A8AD.mlw
sha1: e49a51cceaa9423511be1a110a25934672869485
sha256: ae5b18cb1f45bb4409facea15bd5e309af0ebc6c687ccd2d4273f2c7008925e4
sha512: 46d1b6272bca54871d22d80a9476a818816df47b2d99cc76e60ff489bf180495f26207bb603ec5f390e7e3caf7d86a68ed6dbff5c864417190c3fd724a5f501d
ssdeep: 3072:qc0nsHpyvGj346lbkBN/gppj8aJGIhxjT3A8ygbLAZmitdGlGOy9tQYJ1b/S1P3:qc0bPzIpt8ahTw8PHA8itQsOIQv1uE
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

HackTool:Win64/CobaltStrike.B also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.Meterpreter.157
ClamAV	Win.Tool.Mikey-9840271-0
McAfee	RDN/Generic PUP.z
Cylance	Unsafe
Zillya	Tool.Inject.Win32.10437
Sangfor	Hacktool.Win32.Inject.heur
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win64/CobaltStrike.9d6e7b7c
K7GW	Trojan ( 0050e2be1 )
K7AntiVirus	Trojan ( 0050e2be1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/RiskWare.CobaltStrike.Beacon.A
APEX	Malicious
Avast	Win64:HacktoolX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:HackTool.Win32.Inject.heur
BitDefender	Gen:Variant.Cerbu.81381
MicroWorld-eScan	Gen:Variant.Cerbu.81381
Tencent	Malware.Win32.Gencirc.10ce5263
Ad-Aware	Gen:Variant.Cerbu.81381
Sophos	Mal/Generic-R + ATK/Cobalt-BD
Comodo	Malware@#2lliiuwietizw
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Backdoor.Win64.COBEACON.SMTHA
McAfee-GW-Edition	BehavesLike.Win64.PUP.dh
FireEye	Generic.mg.bc055968569f6edb
Emsisoft	Gen:Variant.Cerbu.81381 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	HackTool.Inject.czg
eGambit	Trojan.Generic
Antiy-AVL	Trojan/Generic.ASMalwS.31B3FFD
Microsoft	HackTool:Win64/CobaltStrike.B
Gridinsoft	Suspicious.XOR_Encoded.bot!yf
AegisLab	Hacktool.Win32.Inject.3!c
GData	Gen:Variant.Cerbu.81381
TACHYON	Trojan/W64.Cobalt.262656
AhnLab-V3	Trojan/Win32.RL_Cometer.R325811
Acronis	suspicious
MAX	malware (ai score=81)
Malwarebytes	Trojan.CobaltStrike
Panda	Trj/CI.A
TrendMicro-HouseCall	Backdoor.Win64.COBEACON.SMTHA
Rising	Backdoor.CobaltStrike!1.D418 (CLASSIC)
MaxSecure	Trojan.Malware.10455307.susgen
Fortinet	Riskware/CobaltStrike
AVG	Win64:HacktoolX-gen [Trj]
Paloalto	generic.ml

How to remove HackTool:Win64/CobaltStrike.B?

HackTool:Win64/CobaltStrike.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X