Win64/RiskWare.CobaltStrike.Artifact.A malicious file

The Win64/RiskWare.CobaltStrike.Artifact.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/RiskWare.CobaltStrike.Artifact.A virus can do?

Anomalous binary characteristics

How to determine Win64/RiskWare.CobaltStrike.Artifact.A?


File Info:
crc32: CD71D133
md5: f2f313cfc30ff5593795e4518654fb03
name: F2F313CFC30FF5593795E4518654FB03.mlw
sha1: 30a0877ed734a2f1db8707b0a9f70eb5d4c8a892
sha256: 2949aec1094a9ecaaef168ef50885e49226bb9b46e8c015b74bc98772ac340e6
sha512: e482114cf9cf42126378374e02e95fc5f96f2ff4e29388aa0f6f1cae46d78025c0edd27bdb0e6fc2bdf09394bc7f40fdd81159c7875cb7f0c4746bdafb6cf247
ssdeep: 192:pDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4LI/yleBUbOj6kxiY:pDMAoKz6WtKEj7aBDix/yobAY
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Win64/RiskWare.CobaltStrike.Artifact.A also known as:

Elastic	malicious (high confidence)
DrWeb	Exploit.ShellCode.46
ClamAV	Win.Trojan.CobaltStrike-9044898-1
ALYac	Gen:Variant.Bulz.208764
BitDefender	Gen:Variant.Bulz.208764
Arcabit	Trojan.Bulz.D32F7C
Cyren	W64/Ulise.BW.gen!Eldorado
Symantec	Backdoor.Cobalt!gen1
TrendMicro-HouseCall	Backdoor.Win64.COBEACON.SMA
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
MicroWorld-eScan	Gen:Variant.Bulz.208764
Ad-Aware	Gen:Variant.Bulz.208764
Sophos	ML/PE-A + ATK/Cobalt-A
F-Secure	Heuristic.HEUR/AGEN.1139243
Zillya	Tool.CobaltStrike.Win64.273
TrendMicro	Backdoor.Win64.COBEACON.SMA
FireEye	Generic.mg.f2f313cfc30ff559
Emsisoft	Gen:Variant.Bulz.208764 (B)
Ikarus	Trojan-Downloader.Win64.Agent
Jiangmin	Trojan.Generic.fsibr
Avira	HEUR/AGEN.1139243
Antiy-AVL	HackTool[VirTool]/Win64.Atosev
Gridinsoft	Trojan.Win64.Agent.oa!s1
Microsoft	Trojan:Win32/Cobaltstrike.MK!MTB
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Bulz.208764
AhnLab-V3	Malware/Win64.RL_Generic.R360995
MAX	malware (ai score=88)
Malwarebytes	Generic.Trojan.Malicious.DDS
APEX	Malicious
ESET-NOD32	a variant of Win64/RiskWare.CobaltStrike.Artifact.A
Rising	Trojan.Shelma!8.1A3D (TFE:dGZlOgUdUGSTryxFyw)
Yandex	Trojan.GenAsa!ZICJWVi3Ujg
eGambit	Unsafe.AI_Score_95%
Fortinet	W64/Agent.CY!tr
AVG	Win64:Malware-gen
Cybereason	malicious.fc30ff
Avast	Win64:Malware-gen

How to remove Win64/RiskWare.CobaltStrike.Artifact.A?

Win64/RiskWare.CobaltStrike.Artifact.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X