Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.63036594 malicious file

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.63036594 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.63036594 virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.63036594?


File Info:

name: C67B0329E9D6C23BB5AC.mlw
path: /opt/CAPEv2/storage/binaries/ac549dd4c4905a1105b755acd17ad86338eedf47c38187721dfaf76512875fb7
crc32: CC5274BD
md5: c67b0329e9d6c23bb5ace2a1eb88f233
sha1: 0ccfd94810685ddcc90b87a1210443c069ca175d
sha256: ac549dd4c4905a1105b755acd17ad86338eedf47c38187721dfaf76512875fb7
sha512: 3a0540a722b0c4a29b26c7b92e29a6281d5a272d47b4efd264fc1df26bebb94dbc7d967d6f90da592d293263c4421f457b656db21c1b7e08f11a308550e7cfd5
ssdeep: 1536:vIrkwk0C9gi3cDTGH6bBM1xfz+QapIHTzB/XSu3W5YMkhohBE8VGh:vIj6gWcTGHmBM1xfz5aeHTzB/XSuSUA2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T172836C7F72780BF2C2A306B7225F41E5BB1A457A135BD5930428813E33DAEA9567F381
sha3_384: 7c09eae62d4b9da59d8ff5d2296a14d91380ca5cc8beacefa23d37e956240371f380b7586579ca98b8956a80019fc6f0
ep_bytes: 60909090909090b80010400090bbd08e
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.63036594 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.63036594
FireEyeGeneric.mg.c67b0329e9d6c23b
CAT-QuickHealBackdoor.Berbew.A6.MUE
SkyhighBehavesLike.Win32.Generic.mh
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.63036594
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.63036594
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
SymantecBackdoor.Berbew.F
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.63036594 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebTrojan.Siggen13.42746
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.63036594
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
IkarusTrojan-Spy.Win32.Qukart
JiangminTrojan.Generic.dzrgt
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Berbew
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.63036594
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
GDataWin32.Trojan.PSE.1VR6SI3
VaristW32/S-705d01a1!Eldorado
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
McAfeeTrojan-FVOJ!C67B0329E9D6
MAXmalware (ai score=82)
DeepInstinctMALICIOUS
VBA32BScope.Backdoor.Berbew
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TencentTrojan-Ransom.Win32.Pornoasset.a
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
BitDefenderThetaAI:Packer.61E432B221
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.810685
AvastWin32:TrojanX-gen [Trj]

How to remove Generic.Dacic.1.Backdoor.Hangup.A.63036594?

Generic.Dacic.1.Backdoor.Hangup.A.63036594 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment