Uiutils 2 0 0 jar Trojan CobaltStrike File Malware Analysis: 85ca1f2a7c25430ce6bd5681b3cafb47

Uiutils-2.0.0.jar Trojan CobaltStrike Analysis

Updated 1 month ago

Checked by Malware Check

uiutils-2.0.0.jar

Technical Analysis

File Name	uiutils-2.0.0.jar
File Type	Zip archive data, at least v2.0 to extract
Scanner Version	1.0.215.174
Database Version	2025-05-01 17:00:21 UTC

⚠

Trojan.U.CobaltStrike.tr

Malware family: CobaltStrike

Cobalt Strike is a penetration testing framework that deploys the Beacon agent for system control. While designed for legitimate security testing, it provides command execution, keylogging, file transfer, privilege escalation, and lateral movement capabilities. The tool operates in-memory to avoid disk-based detection and supports multiple communication protocols.

N/A

Detection Rate

75,661

File Size (bytes)

2025-05-01

Analysis Date

File Identification

Hash Type	Value	Action
MD5	85ca1f2a7c25430ce6bd5681b3cafb47
SHA1	90136c0fd1df027a3ed61fc7de220d8e8d7fa71e
SHA256	3b9c1fcc6dabcd2a36885065bec65d8ca9dfbc908ce49c68092cb5366936c6bb
SHA512	e94ce5e8d1f07b0209b8972fb810366411ea5d75d2300f33678cf62e6ee94c35a61f199660cd952a9fca048eac4293ad2fafc5647b55e6c5594a7880ef5a1ee8

Trojan.U.CobaltStrike.tr Removal

Gridinsoft has the capability to identify and eliminate Trojan.U.CobaltStrike.tr without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button to begin scanning your computer for threats.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process and ensure all threats are eliminated.

Important: Before You Start

Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1