Trojan

Trojan.Win32.Copak.mufm malicious file

Malware Removal

The Trojan.Win32.Copak.mufm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.mufm virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Trojan.Win32.Copak.mufm?


File Info:

name: 03FA51313E6D60B90AC0.mlw
path: /opt/CAPEv2/storage/binaries/906b50b4ebe3454b0d89e7a8dc88c7f8853d6948db0a5d00d4aeef1f9f3b57fe
crc32: C949989B
md5: 03fa51313e6d60b90ac0ae11d1231ceb
sha1: 8fab80e53e54b0868dec0772898d020c2ce19ee6
sha256: 906b50b4ebe3454b0d89e7a8dc88c7f8853d6948db0a5d00d4aeef1f9f3b57fe
sha512: 0239f4b98dd0110b4809f0e925142fb1118e0651bde1f235b6eb9b381555c3d41c09ed628d0a802a03b38ab77f37bf8dc1cb5608f5650f876b7e5d3715ba8989
ssdeep: 1536:Yn1kR0zbHuhZvzq1HRKXr2Zv/n41xEXJs70SaUfnDy0OPG6Bg5Wsi:FR+OhZvmxKXqDXOwSVfnDy0E9aTi
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E493AEF0F6DAD5A8D14E58F606F1B42825BA0C22FCDCA53A9F1D4D2E1DA0D9406DE2F1
sha3_384: ec30f2077ccb459c13a57eabbb379fb2e645f0d8bb08023373faa5e0cfa3255f17bfa75b68804aceeac94eb1456beada
ep_bytes: bf21594ca4bade2a771768d885400068
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.mufm also known as:

LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Variant.Razy.865537
FireEyeGeneric.mg.03fa51313e6d60b9
ALYacGen:Variant.Razy.865537
CylanceUnsafe
SangforTrojan.Win32.Copak.gen
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Glupteba.0e2b517d
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.13e6d6
BitDefenderThetaGen:NN.ZexaF.34114.fuY@aeSC5Sd
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
TrendMicro-HouseCallTROJ_GEN.R002C0DAA22
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.mufm
BitDefenderGen:Variant.Razy.865537
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
TencentTrojan.Win32.Copak.wa
Ad-AwareGen:Variant.Razy.865537
EmsisoftGen:Variant.Razy.865537 (B)
TrendMicroTROJ_GEN.R002C0DAA22
McAfee-GW-EditionBehavesLike.Win32.RAHack.nc
SophosML/PE-A + Troj/Agent-BGOS
GDataGen:Variant.Razy.865537
JiangminTrojan.Copak.bqwo
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Injector
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Razy.DD3501
MicrosoftTrojan:Win32/Glupteba.DB!MTB
AhnLab-V3Malware/Win32.RL_Generic.R293305
McAfeeArtemis!03FA51313E6D
MAXmalware (ai score=87)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
APEXMalicious
RisingTrojan.Injector!1.CD26 (CLOUD)
SentinelOneStatic AI – Malicious PE
FortinetW32/Copak.AGMG!tr
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Win32.Copak.mufm?

Trojan.Win32.Copak.mufm removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment