What is “Trojan.Win32.Copak.mlhm”?

The Trojan.Win32.Copak.mlhm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.mlhm virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location

How to determine Trojan.Win32.Copak.mlhm?

File Info:
name: 699615EB262B6BCFC493.mlw
path: /opt/CAPEv2/storage/binaries/370a9bf9d098b47ed278eb4c5775133f18a30ff1301aed33cec3a1758b852228
crc32: 2E462ABC
md5: 699615eb262b6bcfc493478d2b9b5c1a
sha1: 3d058030d42793d952073fde6b27e5ed18d72822
sha256: 370a9bf9d098b47ed278eb4c5775133f18a30ff1301aed33cec3a1758b852228
sha512: 7d232574be18b81d1572f6af9b4daaa569e1f744afb597b8752fab4ac5f69a53c325d785fc1d78de150493b44dfedaa32f6d03574b2c7f300cf2b919a9a750e2
ssdeep: 12288:uRIuy4aAhZgwpTB3dWDVMXWzhnLhoJ81E1sFk92XMgLew:EyFAhm2TNvACPZ28gLew
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15BB4F13C8646F34BF0F821FFE6DC1D6C826E542234CC1A96A265CFDA259705A13B5E93
sha3_384: 1d1c4d041fb651125067a41f9288d23aed8526c58c9bb48882e5c3a2aaf7f6115dad78cce6b82ec1a3287c4caa17f023
ep_bytes: b8a77e6fba81c6d2f6f85683ec04c704
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.mlhm also known as:

How to remove Trojan.Win32.Copak.mlhm?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.