Trojan

Trojan.Win32.Copak.qdqg malicious file

Malware Removal

The Trojan.Win32.Copak.qdqg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.qdqg virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Win32.Copak.qdqg?


File Info:

name: B9A1BAFACE4C643F6FE6.mlw
path: /opt/CAPEv2/storage/binaries/5e439bf37481e0c9c7483b77bcf67514b42816dc37bf36346d7941b9fc296393
crc32: E2D9D367
md5: b9a1baface4c643f6fe64808615f0b0e
sha1: b5bd292b36c6b981e67fdeb0f50d8bdd4f1ade63
sha256: 5e439bf37481e0c9c7483b77bcf67514b42816dc37bf36346d7941b9fc296393
sha512: 571313142838c8d4c89524cf587c6abf2649199301a1bda2accb651571cd2e7093cfb7fe770366819e8958571839d32a3ef46a5fa9174ac6c5f0febe11297ac7
ssdeep: 98304:jcP6q5/6qelD6q5/6qTO6q5/6qelD6q5/6qP:wxvOv+vOvP
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T190E512D4673560C6FC8514F263E60E67ECF08E03F14EA92E98616C0E3B575A17863E9E
sha3_384: 573540ae7081a77a8bfb005f96a6d46f45430c3be592756674c2106601a034324cc8561bed676cf45b0cfd45c547a4b9
ep_bytes: 680c48a6915f21f24683ec04c70424d8
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.qdqg also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Variant.Razy.870640
FireEyeGeneric.mg.b9a1baface4c643f
ALYacGen:Variant.Razy.870640
CylanceUnsafe
K7AntiVirusTrojan ( 00577ea11 )
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.ace4c6
ArcabitTrojan.Razy.DD48F0
BitDefenderThetaGen:NN.ZexaF.34212.ixZ@aSwc1te
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.qdqg
BitDefenderGen:Variant.Razy.870640
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
TencentTrojan.Win32.Copak.wc
Ad-AwareGen:Variant.Razy.870640
EmsisoftGen:Variant.Razy.870640 (B)
ZillyaTrojan.Injector.Win32.1479901
SophosTroj/Agent-BGOS
AviraTR/Crypt.XPACK.Gen
MicrosoftTrojan:Win32/Glupteba.DB!MTB
GDataGen:Variant.Razy.870640
AhnLab-V3Malware/Win32.RL_Generic.R293305
VBA32BScope.Trojan.Wacatac
MAXmalware (ai score=85)
MalwarebytesTrojan.Injector
APEXMalicious
RisingTrojan.Injector!1.CD26 (RDMK:cmRtazrXMc2ZfoTtqkn8ZRVpcZLl)
YandexTrojan.Copak!IXrhawCAzI8
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/GenKryptik.CTNW!tr
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Win32.Copak.qdqg?

Trojan.Win32.Copak.qdqg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment