Backdoor

How to remove “Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF”?

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF?


File Info:

name: 39CB271169512ED89621.mlw
path: /opt/CAPEv2/storage/binaries/77617daef0ed917b98cfed0eb2547df6e55c47d1f256eaded0cdafc69329955b
crc32: F63BA27F
md5: 39cb271169512ed8962128929b9809d1
sha1: 39fef582d55ba79cc8237c2544978e926e896473
sha256: 77617daef0ed917b98cfed0eb2547df6e55c47d1f256eaded0cdafc69329955b
sha512: 5556e79a46819a983ba91d992394bd0e9bddf7f6bfa7c0b7be7e1b74cea7427ee01393ba3a550592b0ec293648c4243c0bf62c4684e1d63308d8fa46f89abd23
ssdeep: 6144:RBBEs3KfdmUTYaT15f7o+STYaT15fOkHs+yoO:d+dmUTYapJoTYapXHZtO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B06448276224EFE3E97643B411E1028AE505436E01B6B26DFCD4C1BC7FA3DB5B16E258
sha3_384: 032b9f4f0eea7b49d5544781f97ca85a0123618f19700064a815f6b6f4eaf06b3c7a981ad1118dee308b14190388dbe2
ep_bytes: 909090609090b8001040009090bb6c8f
timestamp: 2018-07-09 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Qukart.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.309DDDBF
ClamAVWin.Trojan.Crypted-29
FireEyeGeneric.mg.39cb271169512ed8
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeGenericRXVP-YB!39CB27116951
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Padodor.Win32.620370
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Berbew.36d
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.169512
BitDefenderThetaAI:Packer.9DF4A2E821
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.309DDDBF
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Qukart.ya
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.309DDDBF (B)
BaiduWin32.Trojan-Spy.Quart.a
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.309DDDBF
TrendMicroTROJ_GEN.R03BC0CDI23
McAfee-GW-EditionBehavesLike.Win32.Generic.fh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Fam
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.11RRK8R
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.309DDDBF
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.BU
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32BScope.Backdoor.Berbew
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.309DDDBF
MAXmalware (ai score=88)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0CDI23
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureProxy.Qukart.gen
FortinetW32/GenKryptik.BJQV!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF?

Generic.Dacic.1.Backdoor.Hangup.A.309DDDBF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment