Trojan

Trojan.Win32.Copak.mtpg malicious file

Malware Removal

The Trojan.Win32.Copak.mtpg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.mtpg virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Trojan.Win32.Copak.mtpg?


File Info:

name: 2E90945FB8E635A9908C.mlw
path: /opt/CAPEv2/storage/binaries/650f753b7e9eb36e2858eeab19ea45966af2bb7a0d10ce3a9ab62281aee3948a
crc32: 053570AA
md5: 2e90945fb8e635a9908c565359b75714
sha1: 27ca7bf2a9fe9118ad5ec5fdfc2fe82f397b923f
sha256: 650f753b7e9eb36e2858eeab19ea45966af2bb7a0d10ce3a9ab62281aee3948a
sha512: 5713a5eee29810a7ad6150fe99b533e7a42c488fa6b18923bff4f57d9730c4733824df4f6fd885f94b7cde40574b86158bb696a1e669e5fc2a109b9df50ce10e
ssdeep: 1536:OKAdJDn9NNinmujuqeMHIWJeCRVoIyMUbvz0+yrWggjP3ryUXjH:OfdJD9NN9ujNHIUrYI4vI7agg/t7
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12283D0550445CAECC35CB8BC3D4F37E5ADE37D072046887AEA8245B6AF39C846CD6A39
sha3_384: 948c4a87e8f23df8c09d8c611b6ac03dc0744b84f4957d1f2d7f14a43caba0aab33b6768430b7cb2897d832f4113a0b2
ep_bytes: be316b1baf01d381ea0100000083ec04
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.mtpg also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Heur.fuW@IfSC5Sd
FireEyeGeneric.mg.2e90945fb8e635a9
ALYacGen:Trojan.Heur.fuW@IfSC5Sd
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Copak.812f1fe0
K7GWTrojan ( 00577ea11 )
K7AntiVirusTrojan ( 00577ea11 )
BitDefenderThetaAI:Packer.90472DB81B
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
TrendMicro-HouseCallTROJ_GEN.R002C0DAU22
KasperskyTrojan.Win32.Copak.mtpg
BitDefenderGen:Trojan.Heur.fuW@IfSC5Sd
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentTrojan.Win32.Copak.wd
Ad-AwareGen:Trojan.Heur.fuW@IfSC5Sd
EmsisoftGen:Trojan.Heur.fuW@IfSC5Sd (B)
DrWebTrojan.Siggen14.7487
TrendMicroTROJ_GEN.R002C0DAU22
McAfee-GW-EditionBehavesLike.Win32.Glupteba.mc
SentinelOneStatic AI – Malicious PE
SophosML/PE-A + Troj/Agent-BGOS
APEXMalicious
GDataGen:Trojan.Heur.fuW@IfSC5Sd
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.3503FC2
ArcabitTrojan.Heur.EF1BBF
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
McAfeeArtemis!2E90945FB8E6
MAXmalware (ai score=86)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
RisingTrojan.Injector!1.CD26 (CLOUD)
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Copak.AGMG!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.fb8e63

How to remove Trojan.Win32.Copak.mtpg?

Trojan.Win32.Copak.mtpg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment