Backdoor

About “Generic.Dacic.1.Backdoor.Hangup.A.70A40626” infection

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.70A40626 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.70A40626 virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.70A40626?


File Info:

name: 3EA2862262F60B85DC9B.mlw
path: /opt/CAPEv2/storage/binaries/50b4a6e47a8248d8a876ebe441843d1843805a2025cfe4aa25608e7817b27ab2
crc32: 91D6108A
md5: 3ea2862262f60b85dc9bb0f06d2c2968
sha1: 3670277895bea9096584aa0efed4c6bd352e40b6
sha256: 50b4a6e47a8248d8a876ebe441843d1843805a2025cfe4aa25608e7817b27ab2
sha512: e52e0720bfd1a35f8a74a8e27b1d8035a310dd20cbd7fd803624e7428efa82dd90be5b37ff11323e5f93c5a8407ec843db0243ba93af298dc2eb8b694c3c4145
ssdeep: 1536:KoGuoR/wENMaZsA7DKKK+eHzv+f1MlRpnUtQ5Z5YMkhohBE8VGh:KoGLjMXjRuQ5rUAEQGh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12E835C9A761117B2CB9303B6271B8EA7F739256B13A587C01F09C12D1ED3A78A2777C4
sha3_384: 849cbb10e5479cdb26a2ffe45303c75b7b2a927ea09a45f24474cecd338d434b445625a5c64c6ec5312ed671bfd3e787
ep_bytes: 909060909090b8001040009090bbd08e
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.70A40626 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebTrojan.Siggen13.42746
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.70A40626
FireEyeGeneric.mg.3ea2862262f60b85
CAT-QuickHealBackdoor.Berbew.A6.MUE
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.70A40626
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.70A40626
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.61E432B221
VirITWorm.Win32.Berbew.G
CyrenW32/S-705d01a1!Eldorado
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
ClamAVWin.Trojan.Crypted-30
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.70A40626
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.70A40626 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
BaiduWin32.Trojan-Spy.Quart.a
TrendMicroTROJ_GEN.R03BC0CIL23
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.1VR6SI3
JiangminTrojan.Generic.dzrgt
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
MAXmalware (ai score=87)
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.70A40626
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftTrojan:Win32/Vindor!pz
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
McAfeeTrojan-FVOJ!3EA2862262F6
TACHYONBackdoor/W32.Padodor
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0CIL23
TencentTrojan-Ransom.Win32.Pornoasset.a
IkarusTrojan-Spy.Win32.Qukart
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.895bea
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.70A40626?

Generic.Dacic.1.Backdoor.Hangup.A.70A40626 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment