Backdoor

How to remove “Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57”?

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57 virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57?


File Info:

name: DFE53ADDA69480966832.mlw
path: /opt/CAPEv2/storage/binaries/92c2750b809c04762c5d44e28b4ea70a23f671e9fcfafc0ea8138a92f6dbddbf
crc32: EB801599
md5: dfe53adda69480966832546a811afd54
sha1: 84ef6912c390b2b7aec147b37aaa4a39b41fce06
sha256: 92c2750b809c04762c5d44e28b4ea70a23f671e9fcfafc0ea8138a92f6dbddbf
sha512: 7edf6e3c0fb132bf0e00b85ef4dec550ef4d972f700f157fdeb3ab3d9e96d334333f71d6f08db02cd0ff21605fdc9983d023d1d6ab9b1ff1acaa354f318ec624
ssdeep: 12288:JDdXHaINIVyeNIVy2oIvPKiK13fS2hEYM9RIPqcNaAarL:JDdXHfNIVyeNIVy2jU13fS2hEYM9RIPS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D9E45A3BE2520BD1C7CC06F25EEA4C8A9608453952AE72E7D47581592FE7B1C42F6EC3
sha3_384: 63c16a12d7479ad33582270ace9e5c616d84852c3975d62cba9d145e8ba97fc93d335f3bb0852d4630297087fcbdd644
ep_bytes: 909090609090b8001040009090bb6c8f
timestamp: 2011-09-04 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.2D98BF57
ClamAVWin.Trojan.Crypted-29
FireEyeGeneric.mg.dfe53adda6948096
CAT-QuickHealBackdoor.Berbew.A6.MUE
SkyhighBehavesLike.Win32.RAHack.jc
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.2D98BF57
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.2D98BF57
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.2D98BF57
BitDefenderThetaAI:Packer.9DE9DB8921
VirITWorm.Win32.Berbew.G
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.2D98BF57
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Qukart.ya
SophosMal/Padodor-A
BaiduWin32.Trojan-Spy.Quart.a
F-SecureTrojan.TR/Patched.Ren.Gen
DrWebBackDoor.HangUp.43791
Trapminemalicious.high.ml.score
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.2D98BF57 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dzrgt
GoogleDetected
AviraTR/Patched.Ren.Gen
MAXmalware (ai score=87)
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Berbew.AA!MTB
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
GDataWin32.Trojan.PSE.11RRK8R
VaristW32/Agent.HJI.gen!Eldorado
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
McAfeeTrojan-FVOJ!DFE53ADDA694
TACHYONBackdoor/W32.Padodor
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
YandexBackDoor.Tdongs!HW8fo9qvMKI
IkarusTrojan.Win32.Cerber
MaxSecureProxy.Qukart.gen
FortinetW32/GenKryptik.BJQV!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.2c390b
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57?

Generic.Dacic.1.Backdoor.Hangup.A.2D98BF57 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment