Categories: Trojan

How to remove “Trojan.Win32.Cobalt.hkr”?

The Trojan.Win32.Cobalt.hkr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Cobalt.hkr virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Enumerates running processes
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Cobalt.hkr?


File Info:
name: 0E4E4474A231A23E609D.mlwpath: /opt/CAPEv2/storage/binaries/99fa804be2393a3507dc254556a7a561305a859e068a6328767d94a31811dc60crc32: 8783E308md5: 0e4e4474a231a23e609d1fd13d0cee58sha1: 02585c68c5823c161744536cd78ebc4078d25248sha256: 99fa804be2393a3507dc254556a7a561305a859e068a6328767d94a31811dc60sha512: f2567daee920afd027497e70f997f72a706ce0d09e0ffaaffbf22dcb3933afcd36256cb6fa4ea131e16d1b6ffc3ef4936fe85a813a67525f52cf268451d23f56ssdeep: 12288:mqtdvPYcz1/XO8ooCIPwEBQyAEpdagpS01rTMftqbWbwMfAcOmoqUo3Qa6McIcU:dFPYczA85CI1BrQgpS0pWUzmoq3Qa4fUtype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T18C05BFB8B21428F5E93F423FCD966D89937239234B97D5CF426467C31E633A1EE26901sha3_384: e970984d2e74489a8f566239d83b1e995b0132f3028e9af922004fb1e6c4f1e58956043f5ad2ce1ec5f7d99e1c0b3269ep_bytes: 4883ec28e85b0600004883c428e972fetimestamp: 2021-11-22 15:03:55
Version Info:
0: [No Data]

Trojan.Win32.Cobalt.hkr also known as:

Lionic	Trojan.Win32.Cobalt.4!c
MicroWorld-eScan	Trojan.GenericKD.47568644
CAT-QuickHeal	Trojan.Cobalt
McAfee	Artemis!0E4E4474A231
Alibaba	Trojan:Win32/Cobalt.9d7d4a04
Cybereason	malicious.8c5823
Symantec	Trojan.Gen.MBT
APEX	Malicious
Kaspersky	Trojan.Win32.Cobalt.hkr
BitDefender	Trojan.GenericKD.47568644
Avast	Win64:Malware-gen
Ad-Aware	Trojan.GenericKD.47568644
Emsisoft	Trojan.GenericKD.47568644 (B)
TrendMicro	TROJ_GEN.R067C0WL821
McAfee-GW-Edition	BehavesLike.Win64.Generic.cm
FireEye	Trojan.GenericKD.47568644
Sophos	Mal/Generic-R
Ikarus	Malware.Win32.CobalStrike
GData	Win32.Malware.CobalStrike.IUIG4N
Avira	HEUR/AGEN.1144435
Arcabit	Trojan.Generic.D2D5D704
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.47568644
MAX	malware (ai score=88)
TrendMicro-HouseCall	TROJ_GEN.R067C0WL821
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/PossibleThreat
AVG	Win64:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_60% (W)