Trojan.Win32.Cobalt.cut malicious file

The Trojan.Win32.Cobalt.cut is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Cobalt.cut virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates the modules from a process (may be used to locate base addresses in process injection)
• Enumerates running processes
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Sniffs keystrokes
• Created a process from a suspicious location
• Anomalous binary characteristics

How to determine Trojan.Win32.Cobalt.cut?

File Info:
name: 3A6E239731BBED833E1A.mlw
path: /opt/CAPEv2/storage/binaries/6f60ccd2456e309a46a7fa3f8724fc5fb8125f241900227bb6b61a11ac346b11
crc32: C5B0970F
md5: 3a6e239731bbed833e1a7062a26275c5
sha1: 13569cf0d8a92259ac9e4da4a8bab347842d913d
sha256: 6f60ccd2456e309a46a7fa3f8724fc5fb8125f241900227bb6b61a11ac346b11
sha512: 840e29fa01621603911aa82585d1aa8a810e1dfd4cf65c7d5e0395f8efc60a5fc8672e566a49cb26fe98a3b7c0249350d11cc1f6496290d921490973aae8029f
ssdeep: 98304:pIUNpXCjr4Xc20wsDWox4ZBIBEJiV26KtzXIuxkjJn6rNLrKIQcaA+2ABmXlDmO5:pIUNdur4Xc20jDWoGvbiV26KtUJ6z+9Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T116563325DB81C63BD4937DF80EACC9725DA2EA141D34C0D6B3D90A1EC7B0A951F743AA
sha3_384: 2ac2a5d8df57915e274fdf565126dd9c83772828ab0b90e0299233ee6ca12018442abb6b3c90a39ca20993964e2fd3f4
ep_bytes: e81c1b0000e978feffff8bff558bec51
timestamp: 2013-06-28 14:45:44

Version Info:
0: [No Data]

Trojan.Win32.Cobalt.cut also known as:

How to remove Trojan.Win32.Cobalt.cut?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.