Trojan

Trojan.Win32.Copak.meqg removal

Malware Removal

The Trojan.Win32.Copak.meqg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.meqg virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location

How to determine Trojan.Win32.Copak.meqg?


File Info:

name: E588EE46835EEFEB6826.mlw
path: /opt/CAPEv2/storage/binaries/cda3f1b428c05b5c4b3f52103fb4cf5981bbcf5cbee44cdc80402b85795d1da4
crc32: 117FE7A9
md5: e588ee46835eefeb6826bccde2bfab81
sha1: 90515cccd6f70cef185f7df99c3a5d33d7783bdf
sha256: cda3f1b428c05b5c4b3f52103fb4cf5981bbcf5cbee44cdc80402b85795d1da4
sha512: 207cab38a89be4709f8ccba645ded4ddbbcdd1ac7e1540614b5eec8bba1c2e6da28e12fd1b7fe2206996c513d7e6bf42d43598bdf682c721cc06ebc41a6c1732
ssdeep: 12288:w5ItwJA5nTOCnfpiaC2szWbv/1QEf6v6Fmf90:wZGpbC2LDfOIG0
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DE9401D2A9921672C3CC387AF1CB529077F96816EA3327EFBB0D7B6E40CA8054D55C58
sha3_384: f2bf5b51477de227e8c3ac6d673734ff4dfb7b7401d05065e8eb5482ceca7acc18f905503bfb46ef6ae4c77d492da4f9
ep_bytes: bf0cdfe16c01f668d885400068001040
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.meqg also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.870640
FireEyeGeneric.mg.e588ee46835eefeb
McAfeeGlupteba-FTSD!E588EE46835E
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Copak.ed406e82
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.6835ee
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Copak.meqg
BitDefenderGen:Variant.Razy.870640
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentTrojan.Win32.Copak.wc
Ad-AwareGen:Variant.Razy.870640
SophosML/PE-A + Troj/Agent-BGOS
DrWebTrojan.Siggen14.7487
TrendMicroTROJ_GEN.R002C0DAH22
McAfee-GW-EditionBehavesLike.Win32.Glupteba.gc
EmsisoftGen:Variant.Razy.870640 (B)
GDataGen:Variant.Razy.870640
eGambitUnsafe.AI_Score_100%
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=87)
Antiy-AVLTrojan/Generic.ASMalwS.33684F5
GridinsoftRansom.Win32.Wacatac.sa
ViRobotTrojan.Win32.Z.Razy.410624.PNQ
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
BitDefenderThetaGen:NN.ZexaF.34182.zuZ@aSwc1te
ALYacGen:Variant.Razy.870640
MalwarebytesTrojan.Injector
TrendMicro-HouseCallTROJ_GEN.R002C0DAH22
RisingTrojan.Kryptik!1.BF57 (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CTNW!tr
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Win32.Copak.meqg?

Trojan.Win32.Copak.meqg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment