Trojan.Win32.Copak.acddq (file analysis)

The Trojan.Win32.Copak.acddq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.acddq virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak.acddq?

File Info:
name: 244E9485E32C925F0833.mlw
path: /opt/CAPEv2/storage/binaries/e4062f8f211e707d7d7413fc5a20e8ea13bb9cf31cd1d262069c563eda16f64a
crc32: 30B6D1BF
md5: 244e9485e32c925f0833bb1337ed0227
sha1: c4a8761e8f5183983b06c8b6e53d73f95874c939
sha256: e4062f8f211e707d7d7413fc5a20e8ea13bb9cf31cd1d262069c563eda16f64a
sha512: 45ea285a9295e58021b197f8c0b1cc69fd9a3b0b2593c8f757d92ab1e88e85523c1add1f2feaf8ab98eaa1ce2dd64666a5c0e570ad0e8d438a564e6c551b5123
ssdeep: 49152:52WtXNg2HPYW2y0gqeF+bq4TTow+lsghbyV8qXdTt/P9afxiMghbq4TTow+U:RDHh2yyeshTWROV8qtx9aYhT1
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T13706DF4C23A51E47D433677BEC1DCB7F81426ABD2AA3D6BD708235AB78617C8D501B28
sha3_384: 4f95ed660d6f3444b172fd01d73dd4cf8acd023216e71e8045c9b5188a461d93cf6c1330b9147f9f3a81c50dcb9795d7
ep_bytes: 23969ec973ff1a4e761e13dff4547b65
timestamp: 1975-06-24 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.acddq also known as:

How to remove Trojan.Win32.Copak.acddq?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.