Trojan

Should I remove “Trojan.Win32.Copak.lbej”?

Malware Removal

The Trojan.Win32.Copak.lbej is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.lbej virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Win32.Copak.lbej?


File Info:

name: 09DA8219AB4726ED6FD4.mlw
path: /opt/CAPEv2/storage/binaries/20430405e4f4906dd95cb4a52861b0b5bf20ac80745847dbfdc38e82c185982f
crc32: 489837CE
md5: 09da8219ab4726ed6fd4248df8ee5afa
sha1: d1d4b8fe989b876bdfb714c2bb5e6e0f6b310b7b
sha256: 20430405e4f4906dd95cb4a52861b0b5bf20ac80745847dbfdc38e82c185982f
sha512: 4f62a2e8b30a723d264f7585f2d10fb8ac0d6836bd9b974f2c51583919f1b823ae1e1369a3ec343e1f029ba74aebde0725edc291d43a2a7d5707f303c36045f5
ssdeep: 12288:QgJ0zTr/spoU5paGCL5Pgl7iEr3TLcvLIL03RiAAuRkoHFZmGCL5Pgl7iErl:QgM7sp1xDluOlY3BAuxHFTDluOl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T164050195838EB8DEE88F8EB129947D41FA39380F3517B4A8760064471B6C5C65F0ADFE
sha3_384: e9e6c8dc8358ca8ada9e3172dd2879aaeff4b11974c2a3b70fa03b819b05d22e91fb3320ab2de8c7276627a6ca7af73d
ep_bytes: ba3ece326e4868d88540006800104000
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.lbej also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.870640
McAfeeGenericRXGJ-XZ!C0B0534D1D29
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
K7GWTrojan ( 00577ea11 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
ClamAVWin.Malware.Razy-9916214-0
KasperskyTrojan.Win32.Copak.lbej
BitDefenderGen:Variant.Razy.870640
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Evo-gen [Susp]
TencentMalware.Win32.Gencirc.10ce7b3c
Ad-AwareGen:Variant.Razy.870640
EmsisoftGen:Variant.Razy.870640 (B)
DrWebTrojan.Siggen14.7487
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.09da8219ab4726ed
SophosML/PE-A + Troj/Agent-BGOS
GDataGen:Variant.Razy.870640
MaxSecureTrojan.Malware.121218.susgen
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.3364904
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34114.YuZ@aOhSZ5
ALYacGen:Variant.Razy.870640
MAXmalware (ai score=84)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Injector
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_87%
FortinetW32/GenKryptik.CTNW!tr
AVGWin32:Evo-gen [Susp]
Cybereasonmalicious.9ab472

How to remove Trojan.Win32.Copak.lbej?

Trojan.Win32.Copak.lbej removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment