Trojan

Trojan.Win32.Copak.mmyi removal tips

Malware Removal

The Trojan.Win32.Copak.mmyi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.mmyi virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Trojan.Win32.Copak.mmyi?


File Info:

name: 2F32DA8AB5F1B2B305BB.mlw
path: /opt/CAPEv2/storage/binaries/acd5bfc4e2f5b5979be26a00dec96147f0a5a10f531e972780240b1c5623336b
crc32: 7AC3513B
md5: 2f32da8ab5f1b2b305bb323c46b09ed7
sha1: fee45244017efd873acf661343de29b61feda0d1
sha256: acd5bfc4e2f5b5979be26a00dec96147f0a5a10f531e972780240b1c5623336b
sha512: c9dde3f0599ef63177f4fa7e800dfb82c5de81b91c31ac2b7a2e631ec196ca93a33678a727534d718724117f2c9ce8d35b94d7fdff52fe7346792b56fdcb29a1
ssdeep: 3072:jv0KANDeSsmpgS7zN4ErjmAbUnNqCvcZcmcmb0gzIqEa3CB/H3N:gKANDXp/Jm1/cZLQ5YCB/3N
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T151F3CFF735A40A42C42B2A31932F24EC72617B5264B1D7EEA60DC2EDCECE4DC1D53699
sha3_384: 8380d7312bcf0e2d0611aab99d1c60ec3b2cfa8824e07f59623fde69d318953707ad93bb9cfd051a6ae808edc8a5c426
ep_bytes: be111b832981c3d4f5bfd083ec04c704
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.mmyi also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Variant.Razy.865537
FireEyeGeneric.mg.2f32da8ab5f1b2b3
McAfeeArtemis!2F32DA8AB5F1
CylanceUnsafe
ZillyaTrojan.Injector.Win32.1419785
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Copak.79e04a73
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.ab5f1b
BitDefenderThetaGen:NN.ZexaF.34182.kuZ@aeSC5Sd
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
TrendMicro-HouseCallTROJ_GEN.R002C0DAJ22
KasperskyTrojan.Win32.Copak.mmyi
BitDefenderGen:Variant.Razy.865537
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Evo-gen [Susp]
TencentTrojan.Win32.Copak.wd
EmsisoftGen:Variant.Razy.865537 (B)
TrendMicroTROJ_GEN.R002C0DAJ22
McAfee-GW-EditionBehavesLike.Win32.Glupteba.cc
SophosML/PE-A + Troj/Agent-BGOS
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Copak.bqkb
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan/Generic.ASMalwS.334CA41
MicrosoftTrojan:Win32/Glupteba.DB!MTB
ViRobotTrojan.Win32.Z.Copak.165889.EBY
GDataGen:Variant.Razy.865537
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
VBA32BScope.Trojan.Wacatac
ALYacGen:Variant.Razy.865537
MalwarebytesTrojan.Crypt
APEXMalicious
RisingTrojan.Kryptik!1.BF57 (CLOUD)
YandexTrojan.Copak!mpeK2GRjGgc
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Copak.AGMG!tr
AVGWin32:Evo-gen [Susp]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Win32.Copak.mmyi?

Trojan.Win32.Copak.mmyi removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment