Trojan

What is “Trojan:Win64/CobaltStrike.MFK!MTB”?

Malware Removal

The Trojan:Win64/CobaltStrike.MFK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win64/CobaltStrike.MFK!MTB virus can do?

  • Creates RWX memory
  • Performs some HTTP requests
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win64/CobaltStrike.MFK!MTB?



File Info:

crc32: B4B8B433
md5: 9628fbb2fef5f887dc5516a98f84cddc
name: 9628FBB2FEF5F887DC5516A98F84CDDC.mlw
sha1: 75f76947faa6be83b8fbf5f461743401b849ba42
sha256: 19a4b0ae98f101d61009fb9c447e65a7dd4a23351b040d2c8f02b38ea8111bc3
sha512: 14d1aaee1640c97ecc9e95fb567b8e54619c9508169cc50429b20dbcc1037bf72069b5400a7d8973c73bba51dadeac4b912fcd9c74e967f9ad775d4df1374406
ssdeep: 3072:+CZzX1/Wk6monwVduiC3lJ63/76PdAdu2HtskdVfh1/xAg0FujlGF38DKvOx:+a1exmAwVAiuH66Vuu2HjZjAOQFMmvO
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows


Version Info:

0: [No Data]

Trojan:Win64/CobaltStrike.MFK!MTB also known as:

CynetMalicious (score: 100)
ALYacDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
SangforTrojan.Win64.CobaltStrike.MFK
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Cometer.f04eb1f5
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
SymantecTrojan Horse
APEXMalicious
AvastWin32:ExploitX-gen [Expl]
KasperskyTrojan.Win32.Cometer.fne
BitDefenderDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
NANO-AntivirusTrojan.Win32.Cometer.iuazqa
MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
Ad-AwareDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZedlaF.34690.lu4@aO6UQ2bi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0DEK21
McAfee-GW-EditionRDN/Adware-Cometsys
FireEyeDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
EmsisoftDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF (B)
JiangminTrojan.Cometer.btv
AviraTR/Redcap.gnkyn
MicrosoftTrojan:Win64/CobaltStrike.MFK!MTB
ArcabitDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
AegisLabTrojan.Win32.Shellcode.4!c
GDataDeepScan:Generic.Exploit.Shellcode.1.D1BCDCAF
AhnLab-V3Exploit/Win.Shellcode.C4412972
McAfeeArtemis!9628FBB2FEF5
MAXmalware (ai score=99)
MalwarebytesMalware.AI.3322003918
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DEK21
RisingTrojan.Swrort!8.296 (CLOUD)
IkarusTrojan.Swrort
MaxSecureTrojan.Malware.118175821.susgen
FortinetW32/PossibleThreat
AVGWin32:ExploitX-gen [Expl]
Paloaltogeneric.ml

How to remove Trojan:Win64/CobaltStrike.MFK!MTB?

Trojan:Win64/CobaltStrike.MFK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment