What is “Trojan.Win32.Copak”?

The Trojan.Win32.Copak is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• HTTPS urls from behavior.
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak?

File Info:
name: 69ECAE842F9A79E3D79B.mlw
path: /opt/CAPEv2/storage/binaries/cde517033b70101a35fd7b6025036c652199e8a541946e9c04b5dd3c6141d596
crc32: F9299875
md5: 69ecae842f9a79e3d79b070f5e026b4e
sha1: 6aef1fde1a22ab04a02af7f88987faa1d446afd5
sha256: cde517033b70101a35fd7b6025036c652199e8a541946e9c04b5dd3c6141d596
sha512: 05059d7ba5e527a63fc5ec769de6780645e50fc1f210adae36b5f2f1c9c7c78951213e5941a2713e91e43df162657a0b0dc36fb20698ace766bcd6b4b0a7dd93
ssdeep: 3072:wVwbjK23T0SlwgzfPeTYNlDYz069tJNFVf/f:wOjb7P4j979f3
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T16CD302F0C5F9E56ED284537372B8E2C8E3E9714B12BE9481601454B4FFB8C4A798F6A1
sha3_384: d345a73b7673f71c4c972334ab10a8d74740f1f883e3bdfd566ab42cfc9b4ab0a9dd24c0a46e453b85a6e292cf593a79
ep_bytes: 5589e5bf0000000089d3b8624d0f21b8
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak also known as:

How to remove Trojan.Win32.Copak?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.