Trojan

What is “Trojan.Win32.Copak.list”?

Malware Removal

The Trojan.Win32.Copak.list is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.list virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Trojan.Win32.Copak.list?


File Info:

name: 7D7835954AF68BBBD4FA.mlw
path: /opt/CAPEv2/storage/binaries/4b9be5d9e478222516dad0bba4539dff4c11098ea453ff2966bf0357e44aee8b
crc32: 80A3D262
md5: 7d7835954af68bbbd4fa16f49116b595
sha1: 8f31155fb16eb2240f39709236f929ebc898bb54
sha256: 4b9be5d9e478222516dad0bba4539dff4c11098ea453ff2966bf0357e44aee8b
sha512: cff05e86aa537508a03516c48496203cb7a116f66903930a8b582668326777e0ce754856e0d9de998fba41379027772827c828a36d856d5d5ceb1ecf764805a0
ssdeep: 3072:hH9Tx2NOnPtr59kBMtVNzZIcxf65pJGku7M9ABBGUnvlpB:h5cN+3k8VNzZIppRu49EvbB
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T181F3D073492AC01FC06A65F3DBC5C2472090BEAF0373ADCB7B35175B64A818D47A1AE6
sha3_384: 6fa7b215b229a8bad42dcd3daf42278b181322076f3d6859fd1d5d166cc9ab0b6ad5e90e9c8f69af7992f59faa5d660d
ep_bytes: 682f4014c85829d268d8854000680010
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.list also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Variant.Razy.865537
FireEyeGeneric.mg.7d7835954af68bbb
McAfeeGenericRXGJ-XZ!F5D493827ADC
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.54af68
BitDefenderThetaGen:NN.ZexaF.34114.kuZ@aeSC5Sd
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
KasperskyTrojan.Win32.Copak.list
BitDefenderGen:Variant.Razy.865537
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Evo-gen [Susp]
TencentMalware.Win32.Gencirc.10ce880a
Ad-AwareGen:Variant.Razy.865537
SophosML/PE-A + Troj/Agent-BGOS
McAfee-GW-EditionBehavesLike.Win32.Glupteba.cc
EmsisoftGen:Variant.Razy.865537 (B)
GDataGen:Variant.Razy.865537
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Injector
ArcabitTrojan.Razy.DD3501
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
VBA32BScope.Trojan.Wacatac
MAXmalware (ai score=83)
MalwarebytesTrojan.Crypt
APEXMalicious
RisingTrojan.Kryptik!1.D284 (RDMK:cmRtazo20yKhKuHBGWHuW2g09JSc)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Copak.AGMG!tr
AVGWin32:Evo-gen [Susp]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Win32.Copak.list?

Trojan.Win32.Copak.list removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment