Malware

About “Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0” infection

Malware Removal

The Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0 virus can do?

  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • A possible cryptomining command was executed

Related domains:

pool.supportxmr.com

How to determine Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0?


File Info:

crc32: EC2FB4A9
md5: df17853d59293978da36909393774ed2
name: DF17853D59293978DA36909393774ED2.mlw
sha1: c12aba8a70ec6a465589c7edbddf5f44ff8018ff
sha256: 248ceb849fe31c168d9da6e778069ec7d96016abb3913a1eb9a9b7e177143309
sha512: ef3ac2e0de4c613ee4e58db555350dcfbdf5d8aa56256aff99db63cab4ba615dc36bc5ba270893765e1d073d4e40fe07a62a28b3a8ead03fcb85efbc7a5ed3c0
ssdeep: 24576:6fftl/2vwEjCFNCnQPg1Uqih1jYauWd0a:4VMvwEmFTn1UFWd0a
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright (C) Microsoft Corp. 1981-1997
InternalName: rc.exe
FileVersion: 5.00.1641.1
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows NT(R) Operating System
ProductVersion: 5.00.1641.1
FileDescription: Microsoft Resource Compiler
OriginalFilename: rc.exe
Translation: 0x0409 0x04b0

Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTool.InstSrv.10
ClamAVWin.Coinminer.Generic-7151253-0
CAT-QuickHealTrojan.Generic.2919
McAfeeArtemis!DF17853D5929
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaTrojan:Win32/CoinMiner.8dd7274f
Cybereasonmalicious.d59293
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Miner.gen
BitDefenderDropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0
NANO-AntivirusTrojan.Win32.BtcMine.euxtmf
MicroWorld-eScanDropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0
TencentScript.Trojan.Miner.Wsjv
SophosBlackMoon Packed (PUA)
BitDefenderThetaGen:NN.ZexaF.34266.WmLfaGFSZGeS
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Fake.bc
FireEyeGeneric.mg.df17853d59293978
EmsisoftDropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0 (B)
JiangminTrojan.Miner.lwi
AviraHEUR/AGEN.1125447
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.31041B9
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/CoinMiner.AC!bit
GDataWin32.Trojan.Agent.WP
AhnLab-V3Trojan/Win32.Tiggre.R213288
VBA32Trojan.Convagent
MAXmalware (ai score=100)
PandaTrj/GdSda.A
RisingHackTool.CoinMiner!1.B017 (CLASSIC)
YandexTrojan.GenAsa!hw1T+PADoho
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.ESFJ!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0?

Dropped:Generic.Dacic.1.BitCoinMiner.A.ECC452A0 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment