Trojan

Trojan.CobaltStrike.BK (file analysis)

Malware Removal

The Trojan.CobaltStrike.BK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.CobaltStrike.BK virus can do?

    How to determine Trojan.CobaltStrike.BK?

    
    

    File Info:

    crc32: E9CE40A7
    md5: 02cd5ef0d05af1a8b8b110773857a121
    name: 02CD5EF0D05AF1A8B8B110773857A121.mlw
    sha1: 493eabb7dfb79ea38d1cf0e732d3fd09606a6702
    sha256: 54855350ab504fbbf5cbe0e5c45478f024717c251449561548a57d06dd4a2530
    sha512: 23b86458238a65ce8e1e4bed513ffa4e3b6d8060d6db0dab3e062c423e642896e2c132c8105f40fa79958cdfe018777b32e6674e5edaf4ca2422e26fe963b6de
    ssdeep: 3072:5dFna2JSkcrnYSdM50RAXSPy0qUiS0Lxh5H4evyzUhjQUt5b:FRYkcrY4MCIt07iPlvU0j
    type: MS-DOS executable, MZ for MS-DOS

    Version Info:

    0: [No Data]

    Trojan.CobaltStrike.BK also known as:

    BkavW32.AIDetect.malware1
    Elasticmalicious (high confidence)
    DrWebBackDoor.Meterpreter.119
    CynetMalicious (score: 100)
    CAT-QuickHealHackTool.CSBeacon.S18658576
    ALYacTrojan.CobaltStrike.BK
    CylanceUnsafe
    ZillyaTool.CobaltStrike.Win32.77
    SangforWin.Tool.CobaltStrike-6336852-0
    CrowdStrikewin/malicious_confidence_100% (W)
    AlibabaBackdoor:Win32/CobaltStrike.191228
    K7GWRiskware ( 0050f89b1 )
    K7AntiVirusRiskware ( 0050f89b1 )
    CyrenW32/Agent.CAI.gen!Eldorado
    SymantecML.Attribute.HighConfidence
    ESET-NOD32a variant of Win32/RiskWare.CobaltStrike.Beacon.A
    APEXMalicious
    AvastWin32:CobaltStrike-A [Trj]
    ClamAVWin.Trojan.CobaltStrike-8091534-0
    KasperskyHEUR:Trojan.Win32.Cometer.gen
    BitDefenderTrojan.CobaltStrike.BK
    NANO-AntivirusTrojan.Win32.CobaltStrike.gyfpad
    MicroWorld-eScanTrojan.CobaltStrike.BK
    TencentMalware.Win32.Gencirc.10ce3914
    Ad-AwareTrojan.CobaltStrike.BK
    SophosMal/Swrort-Y
    BitDefenderThetaAI:Packer.960F02291D
    McAfee-GW-EditionBehavesLike.Win32.Backdoor.dh
    FireEyeGeneric.mg.02cd5ef0d05af1a8
    EmsisoftTrojan.CobaltStrike.BK (B)
    SentinelOneStatic AI – Malicious PE
    AviraTR/Crypt.XPACK.Gen
    eGambitTrojan.Generic
    MicrosoftHackTool:Win32/CobaltStrike.A
    GridinsoftTrojan.Win32.Agent.oa!s1
    GDataWin32.Trojan.CobaltStrike.IJBSPY
    TACHYONBackdoor/W32.Agent.208896.DL
    AhnLab-V3Trojan/Win32.RL_CobaltStrike.R362680
    Acronissuspicious
    McAfeeGenericRXLP-FP!02CD5EF0D05A
    MAXmalware (ai score=84)
    VBA32BScope.Trojan.Cometer
    MalwarebytesTrojan.CobaltStrike
    PandaTrj/Genetic.gen
    RisingBackdoor.CobaltStrike!1.CEA8 (CLOUD)
    YandexTrojan.GenAsa!sxzeWbubS1I
    IkarusVirus.Win32.Atosev
    MaxSecureTrojan.Malware.10056239.susgen
    FortinetRiskware/CobaltStrike
    AVGWin32:CobaltStrike-A [Trj]
    Paloaltogeneric.ml
    Qihoo-360Win32/HackTool.CobaltStrike.Hx4C5rcA

    How to remove Trojan.CobaltStrike.BK?

    Trojan.CobaltStrike.BK removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment