Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.02852D8E removal instruction

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.02852D8E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.02852D8E virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.02852D8E?


File Info:

name: D2BC932ED78A73401B17.mlw
path: /opt/CAPEv2/storage/binaries/883072512cdc30867eaa396629188449a6aff27dff2326cfb4e162e92a868047
crc32: 15ECCDF7
md5: d2bc932ed78a73401b176e1ddb36ea86
sha1: 01555042ef1847dced8e07888934d97d11efd816
sha256: 883072512cdc30867eaa396629188449a6aff27dff2326cfb4e162e92a868047
sha512: d54faf725cbbd911fb0b30c7bbe1bab615c82feedf987f68128a340742298a66e9fc9a42455ef23eda0c98a6eb5cc9d452bdda432a672a332f422df5bfcd54b6
ssdeep: 3072:HuiOw3qL1I968kUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:OizqL1I9/nAHj05xP3DZyN1eRppzcexn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15AE3191BB24507F2C3C333B2274E59F6B72954F4132AB990646E8C1D2267E789F7B285
sha3_384: 5f24494ef7dee7ff9149733e84f55a2fcbfb029fea6ac22af88bcd3de610026e2c15c37c6af61e2dfe56b9570a74b252
ep_bytes: 90609090909090b80010400090bbd08e
timestamp: 1972-09-27 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.02852D8E also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E
ClamAVWin.Trojan.Crypted-30
FireEyeGeneric.mg.d2bc932ed78a7340
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeTrojan-FVOJ!D2BC932ED78A
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Qukart.L.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Siggen13.42746
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E
McAfee-GW-EditionBehavesLike.Win32.Generic.cm
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
SentinelOneStatic AI – Malicious PE
GDataGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E
JiangminTrojan.Generic.dzrgt
AviraTR/Dropper.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftTrojan:Win32/Vindor!pz
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.A3320B7E21
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.02852D8E
MAXmalware (ai score=88)
VBA32BScope.Backdoor.Berbew
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.02852D8E?

Generic.Dacic.1.Backdoor.Hangup.A.02852D8E removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment