About “Trojan.CobaltStrike.AQ (B)” infection

The Trojan.CobaltStrike.AQ (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.CobaltStrike.AQ (B) virus can do?

Anomalous binary characteristics

How to determine Trojan.CobaltStrike.AQ (B)?


File Info:
crc32: D707535C
md5: 35e00593d72818f8fa3da46b348dfc73
name: 35E00593D72818F8FA3DA46B348DFC73.mlw
sha1: 8d689eedb8fa24e02c89b33a1adb5719800a91d0
sha256: 249427f82c64ad6211a48c11bb736f2f944f0fa117e69e2d61923d8a6e6b9243
sha512: 899b0dafbe45f148c3db8c5a36de60fc3d6f75a87845e6221eda153077b25aa79098243cd0e506af940a13ee2d49194da1e08ba307291c01d26ac30c048c9cbc
ssdeep: 192:7HCugRK83SxHn2OQ/dmBI4KBPwgir+xzt+bqUqV/Qjo7AGa:bCxRKqbOCdWIVBPk+xzgfCXAn
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Trojan.CobaltStrike.AQ (B) also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005622831 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Swrort.41
Cynet	Malicious (score: 100)
CAT-QuickHeal	TrojanAPT.Cobalt.A7
ALYac	Trojan.CobaltStrike.AQ
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/Swrort.770f1efb
K7GW	Trojan ( 005622831 )
Cybereason	malicious.3d7281
Cyren	W32/Fugrafa.MKIR-7653
Symantec	Backdoor.Cobalt!gen3
ESET-NOD32	a variant of Win32/Rozena.AMZ
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.CobaltStrike-7899872-1
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.CobaltStrike.AQ
NANO-Antivirus	Trojan.Win32.Swrort.fahmzc
ViRobot	Trojan.Win32.Cobalt.14336
MicroWorld-eScan	Trojan.CobaltStrike.AQ
Tencent	Malware.Win32.Gencirc.10b0ccf8
Ad-Aware	Trojan.CobaltStrike.AQ
Sophos	ML/PE-A + ATK/Cobalt-A
TrendMicro	Trojan.Win32.COBALT.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
FireEye	Generic.mg.35e00593d72818f8
Emsisoft	Trojan.CobaltStrike.AQ (B)
Jiangmin	Trojan.Generic.ccimj
Avira	TR/Crypt.XPACK.Gen7
Microsoft	Trojan:Win32/Swrort.A
Gridinsoft	Trojan.Win32.Swrort.vb!s1
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.CobaltStrike.AQ
AhnLab-V3	Trojan/Win32.CobaltStrike.R329694
McAfee	Trojan-Cobalt!35E00593D728
MAX	malware (ai score=87)
VBA32	Trojan.Swrort
Malwarebytes	Trojan.Rozena
TrendMicro-HouseCall	Trojan.Win32.COBALT.SM
Rising	Backdoor.CobaltStrike!1.D049 (CLOUD)
Yandex	Trojan.GenAsa!/C5jzoNrl5s
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Generic.AC.416F47
AVG	Win32:Malware-gen
Qihoo-360	HEUR/QVM20.1.052F.Malware.Gen

How to remove Trojan.CobaltStrike.AQ (B)?

Trojan.CobaltStrike.AQ (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X