Trojan

About “Trojan.Win32.Copak.agacg” infection

Malware Removal

The Trojan.Win32.Copak.agacg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.agacg virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Deletes executed files from disk

How to determine Trojan.Win32.Copak.agacg?


File Info:

name: 5CE9A706721DAF02653E.mlw
path: /opt/CAPEv2/storage/binaries/0a885e9ed9142f90676dd328d57b3b163aa24e11e8542ca8cdde90881eaf35ad
crc32: 703ADF92
md5: 5ce9a706721daf02653e724b22d3a52a
sha1: 14183af4e294b650f214c0e8d8377c9db227d5d7
sha256: 0a885e9ed9142f90676dd328d57b3b163aa24e11e8542ca8cdde90881eaf35ad
sha512: 5cfb66d9c19640677e490565bd8910599e0f2fa3df5793ac539a8e9a082bb4751cde859625d5b3965e94e2b5543f036050e1bc29b4197dd6bbe5567ba9b2e5bc
ssdeep: 3072:+ra1q/Cp08MV7kSb5HLEHfEG51N4dHpW9sz3GXZo0scMqF2DeP3mLPx1I6zajG:+M8Cp0TqA5HL9+1NsY23GJo0scxFQ43u
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15104124F93C313B6E5C503B642C910D52A7FA9A733BA62B1574020F8118579D9EBCE7B
sha3_384: b74f2ac393ad445b3427a46800d5ca06adb6436920d336d4336d089b92aeb0281d3bd21206e65eb683c1856d1855df40
ep_bytes: 68000000005b5089f75909f683ec0489
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.agacg also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebTrojan.Siggen21.53527
MicroWorld-eScanGen:Variant.Razy.870640
FireEyeGeneric.mg.5ce9a706721daf02
SkyhighBehavesLike.Win32.RAHack.cc
ALYacGen:Variant.Razy.870640
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058dcbc1 )
BitDefenderGen:Variant.Razy.870640
K7GWTrojan ( 005304e81 )
Cybereasonmalicious.4e294b
BitDefenderThetaGen:NN.ZexaF.36792.luZ@aejYyMk
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.XVS
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Razy-9874932-0
KasperskyTrojan.Win32.Copak.agacg
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Injector!1.C865 (CLASSIC)
SophosTroj/Agent-BGOS
F-SecureTrojan.TR/Dropper.Gen
VIPREGen:Variant.Razy.870640
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Razy.870640 (B)
IkarusTrojan.Win32.Injector
VaristW32/Kryptik.ECM.gen!Eldorado
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.GenKryptik
Kingsoftmalware.kb.a.997
MicrosoftTrojan:Win32/Vindor!pz
ArcabitTrojan.Razy.DD48F0
ZoneAlarmTrojan.Win32.Copak.agacg
GDataGen:Variant.Razy.870640
GoogleDetected
AhnLab-V3Trojan/Win.FUBP.R618951
McAfeeGlupteba-FUBP!5CE9A706721D
MAXmalware (ai score=88)
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Wacatac
Cylanceunsafe
TencentTrojan.Win32.Copak.pa
YandexTrojan.Copak!KG5+iBNn9NE
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.ECM!tr
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Win32.Copak.agacg?

Trojan.Win32.Copak.agacg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment