Trojan

Trojan:Win32/Glupteba!pz malicious file

Malware Removal

The Trojan:Win32/Glupteba!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Glupteba!pz virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Glupteba!pz?


File Info:

name: 08B20865BF06F8FBC911.mlw
path: /opt/CAPEv2/storage/binaries/d702087ff685763a6ca87310e352a48e9d9aceaa5c77f76e32bd501a98ef4827
crc32: 0ECF287D
md5: 08b20865bf06f8fbc911dde6c73717e0
sha1: 5363d14c5ec7b58f0b1278403d833ad004ecb03d
sha256: d702087ff685763a6ca87310e352a48e9d9aceaa5c77f76e32bd501a98ef4827
sha512: 1faef3ba3dfb9620fd20122dac766051480aa8b3b4c3229e94e4c83da9eb4b347ea2b52f221318a1df6f0a1cae822309d72f72e68ca5c5635a8bc459c037851f
ssdeep: 1536:m1oEBl/mFPB/jN/jXp4/M3+aLbMdAOfUUWZSuxQidr:miEBsrdjXJ+anMuOfUUWZSuxQI
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C483BF38114326ECEF4699339E6980F3DEA26F71D9F0434E471C12371A5ADB67818A7E
sha3_384: 1742ab6a5aacee70fe6cc3199d728a8aad556cee510aba08ece0dd4f4445f8cf09e7d2cd5e56c6e154a1772877cd963c
ep_bytes: 83ec04c70424000000005e5268be85b8
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan:Win32/Glupteba!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
DrWebTrojan.Siggen14.30094
MicroWorld-eScanGen:Trojan.Heur.fuW@IHDbwpi
FireEyeGeneric.mg.08b20865bf06f8fb
SkyhighBehavesLike.Win32.Glupteba.mc
ALYacGen:Trojan.Heur.fuW@IHDbwpi
Cylanceunsafe
VIPREGen:Trojan.Heur.fuW@IHDbwpi
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058e60a1 )
BitDefenderGen:Trojan.Heur.fuW@IHDbwpi
K7GWTrojan ( 0058e60a1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.D4A998451B
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.XVS
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Copak.vho
AlibabaTrojan:Win32/Glupteba.2afa3a4f
NANO-AntivirusVirus.Win32.Gen.ccmw
ViRobotTrojan.Win.Z.Kryptik.84480.AWN
RisingTrojan.Injector!1.CD26 (CLASSIC)
EmsisoftGen:Trojan.Heur.fuW@IHDbwpi (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
ZillyaTrojan.GenKryptik.Win32.103046
TrendMicroTROJ_GEN.R002C0DK723
Trapminemalicious.high.ml.score
SophosTroj/Agent-BGOS
SentinelOneStatic AI – Malicious PE
VaristW32/Kryptik.ECM.gen!Eldorado
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.GenKryptik
MicrosoftTrojan:Win32/Glupteba!pz
ArcabitTrojan.Heur.EAFEB6
ZoneAlarmHEUR:Trojan.Win32.Copak.vho
GDataGen:Trojan.Heur.fuW@IHDbwpi
GoogleDetected
AhnLab-V3Malware/Win32.RL_Generic.R293305
VBA32BScope.Trojan.Wacatac
DeepInstinctMALICIOUS
MalwarebytesMalware.AI.4263717155
TrendMicro-HouseCallTROJ_GEN.R002C0DK723
TencentTrojan.Win32.Copak.zd
YandexTrojan.Copak!Sv4QMzqwIT4
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.ECM!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.c5ec7b
AvastWin32:Evo-gen [Trj]

How to remove Trojan:Win32/Glupteba!pz?

Trojan:Win32/Glupteba!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment