Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82 removal guide

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82 virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82?


File Info:

name: 650247F387CECD37CB1D.mlw
path: /opt/CAPEv2/storage/binaries/e33e628100b71a5494cc84c84837571efd21da571881a3e1e2588ceadcad4f46
crc32: BD40633A
md5: 650247f387cecd37cb1df0398df4ee94
sha1: f1f2163b67a2b3fe4597a3ae940490f440c5a8d9
sha256: e33e628100b71a5494cc84c84837571efd21da571881a3e1e2588ceadcad4f46
sha512: 7d329304dfc6d460170f5e1a058730ea3e4956d346b6b3a38ab7b315b9ba1f9f9ade936077093abee20b88bbfe32396e1b4b78a150ae110a53fb9cc62e7fc7ba
ssdeep: 1536:s3nR0Yn4AP4jbakC6e0vW+aaMOfimXgMIIFbNkX:ORgal69vW+aUflXbbNkX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T151737D5629780F61CAC70BFA04F7449ED2254C7DD36AB2A9D538C38C33EF6A5CA61B40
sha3_384: ae636d92114b62ecc829ddd673bd04659dd567fd90ea223b9e39fbbf44975014549db3eef7ef3ee78075c5fc55a3175a
ep_bytes: 609090909090b8001040009090bb6c8f
timestamp: 2011-09-04 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Qukart.4!c
tehtrisGeneric.Malware
CynetMalicious (score: 100)
FireEyeGeneric.mg.650247f387cecd37
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeGenericRXVP-YB!650247F387CE
MalwarebytesVirlock.Ransom.FileInfector.DDS
ZillyaTrojan.Padodor.Win32.693612
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Berbew.36d
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
ClamAVWin.Trojan.Crypted-28
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.5BA4AA82
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.5BA4AA82
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.5BA4AA82 (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.5BA4AA82
TrendMicroTROJ_GEN.R002C0CED23
McAfee-GW-EditionBehavesLike.Win32.Generic.lh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Fam
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.5BA4AA82
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
GDataWin32.Trojan.PSE.11RRK8R
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
BitDefenderThetaAI:Packer.91BD113721
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.5BA4AA82
MAXmalware (ai score=100)
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0CED23
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.4223897.susgen
FortinetW32/Krato.A!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.387cec
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82?

Generic.Dacic.1.Backdoor.Hangup.A.5BA4AA82 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment