Trojan

What is “Trojan:Win32/Cobaltstrike!MSR”?

Malware Removal

The Trojan:Win32/Cobaltstrike!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Cobaltstrike!MSR virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory

Related domains:

iqio.me

How to determine Trojan:Win32/Cobaltstrike!MSR?


File Info:

crc32: 72756477
md5: 47cab7f983d1e1ab2d3fba84a2b61fb1
name: upload_file
sha1: 1a0903d80b271f8dda875c8e8b6947db54de2204
sha256: b568a4ca18fce49b465d0db8697640d556f579932db0315398a810140c66f0db
sha512: 2edee3bbbb062088fc7f55c97dfa8342110071ba2df212a7145da8c7a316a02f67afa6546d3171a1f2c8d5a67d2a88b619b94d65eb310e3e8e8528f98077afcd
ssdeep: 24576:tWCwXNDTo1B4a8H7wY5hQPMnciiWY2KdBlrE+C2MQ09RLBZ08U/qiE:tW3F0jN8cY550MQ09P68x
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 2013-2015, Garden rootbasic Season Software Limited
InternalName: Garden rootbasic Season
FileVersion: 0.7.85.56
CompanyName: Garden rootbasic Season Software Limited
ProductName: Garden rootbasic Season
ProductVersion: 0.7.85.56
FileDescription: Garden rootbasic Season
OriginalFilename: ageNose.exe
Translation: 0x0409 0x04e4

Trojan:Win32/Cobaltstrike!MSR also known as:

MicroWorld-eScanTrojan.GenericKD.34794028
CAT-QuickHealTrojan.Slepak
McAfeeArtemis!47CAB7F983D1
VIPRETrojan.Win32.Generic!BT
BitDefenderTrojan.GenericKD.34794028
K7GWTrojan ( 005714961 )
TrendMicroTrojan.Win32.COBEACON.AN
CyrenW32/Trojan.FUCU-4958
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Slepak.gen
AlibabaTrojan:Win32/GenCBL.f45040b1
ViRobotTrojan.Win32.Z.Gencbl.1949168
AegisLabTrojan.Win32.Slepak.4!c
Ad-AwareTrojan.GenericKD.34794028
EmsisoftMalCert.A (A)
ComodoMalware@#14k7c7jgmfmln
F-SecureTrojan.TR/Redcap.tthce
DrWebTrojan.Encoder.32850
InvinceaMal/Generic-S (PUA)
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.34794028
SophosMal/Generic-S
WebrootW32.Trojan.Gen
AviraTR/Redcap.tthce
MicrosoftTrojan:Win32/Cobaltstrike!MSR
ArcabitTrojan.Generic.D212EA2C
ZoneAlarmHEUR:Trojan.Win32.Slepak.gen
GDataTrojan.GenericKD.34794028
CynetMalicious (score: 85)
ALYacTrojan.GenericKD.34794028
MAXmalware (ai score=85)
MalwarebytesBackdoor.Bot
PandaTrj/CI.A
ESET-NOD32a variant of Win32/GenCBL.DS
TrendMicro-HouseCallTrojan.Win32.COBEACON.AN
IkarusTrojan.Win32.Gencbl
FortinetPossibleThreat.MU
AVGWin32:Trojan-gen
Qihoo-360Win32/Trojan.792

How to remove Trojan:Win32/Cobaltstrike!MSR?

Trojan:Win32/Cobaltstrike!MSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment