Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2 removal

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2 virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2?


File Info:

name: 44C9A7366BB03A4A7072.mlw
path: /opt/CAPEv2/storage/binaries/10d417d2faa774f0fd39f4e89a56d819cb469fddfd74b3b40e8086a3643836a8
crc32: 489A83C9
md5: 44c9a7366bb03a4a70728071204b5388
sha1: b1a5565ebaff0f64321b4b90e45e5441818869b2
sha256: 10d417d2faa774f0fd39f4e89a56d819cb469fddfd74b3b40e8086a3643836a8
sha512: b1949c8c5f578b662b432bc4c1efab15183d564a93ba88db3ad02cd1da9033ea98e04898e070a9820c53b1e37f379d60ebfa42f4a8721bff6be5aa1d2e964f5c
ssdeep: 3072:G9JCVm/w7VgMUAPgxed6BYudlNPMAvAURfE+Hxgu+tAcrbFAJc+RsUi1aVDkOvJ:2CgY7VTUIyedZwlNPjLs+H8rtMs4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F3343835F7A80B72C74E0232166B1ED1DE38C49C0F5552D3E3A89E495B36CB091BEB66
sha3_384: 37c38f6bcf5138054640ef9359c167a12da30e4524e74df32e23ee469ae8f14f79dd004e3717b4772048db5b6b9085d8
ep_bytes: 909090909060b8001040009090bb6c8f
timestamp: 2018-07-09 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.27D57CB2
ClamAVWin.Trojan.Crypted-31
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeGenericRXVP-YB!44C9A7366BB0
Cylanceunsafe
ZillyaTrojan.Qukart.Win32.1042082
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.27D57CB2
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.27D57CB2 (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.27D57CB2
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.44c9a7366bb03a4a
SophosTroj/Padodo-Fam
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.11RRK8R
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.27D57CB2
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
VBA32BScope.Backdoor.Berbew
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.27D57CB2
MAXmalware (ai score=87)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.BJQV!tr
BitDefenderThetaAI:Packer.2B8D4C3B21
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.66bb03
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2?

Generic.Dacic.1.Backdoor.Hangup.A.27D57CB2 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment