Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A removal

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A?


File Info:

name: CE20BB822CA3B56BCF70.mlw
path: /opt/CAPEv2/storage/binaries/b6f93ee0d67d04ea74e113c0896f818f1a790b25797f06cc42b61e82245ff38f
crc32: C0FB43F4
md5: ce20bb822ca3b56bcf708a17a10632f0
sha1: 9316d3354585412f1a9595d21b2eaf4694ca64c9
sha256: b6f93ee0d67d04ea74e113c0896f818f1a790b25797f06cc42b61e82245ff38f
sha512: 11ecc2ea27af492400997b10ebf96ef311724ad608940bcf7fceb5d420432aa28bf46a1a310c19172c3c94b0e4eba6bd912c339c2309fb47e96a74e0070c7fc6
ssdeep: 1536:/2lz7+nXs4Rlhx6b+CeodAQO5YMkhohBE8VGh:Sz+84RZVQAQaUAEQGh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T118835B16B2752FA2CAA603B3378D4D99F31AD539136A8DF3D435C01D2A27CE76276780
sha3_384: c8b3248e4b5a9ac6e84ea279c94d81698c556f044d5a8d3348edda84497e6234a86de02c7760632de993e7a3eafca992
ep_bytes: 90906090909090b80010400090bbd08e
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A also known as:

BkavW32.AIDetectMalware
AVGWin32:TrojanX-gen [Trj]
Elasticmalicious (high confidence)
DrWebTrojan.Siggen13.42746
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.71CE4F4A
FireEyeGeneric.mg.ce20bb822ca3b56b
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeTrojan-FVOJ!CE20BB822CA3
Cylanceunsafe
ZillyaTrojan.Qukart.Win32.1976311
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.545854
BitDefenderThetaAI:Packer.61E432B221
VirITWorm.Win32.Berbew.G
CyrenW32/S-705d01a1!Eldorado
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Spy.Qukart
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Crypted-32
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.71CE4F4A
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.71CE4F4A (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
BaiduWin32.Trojan-Spy.Quart.a
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.71CE4F4A
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
IkarusTrojan-Spy.Win32.Qukart
GDataWin32.Trojan.PSE.1VR6SI3
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.71CE4F4A
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftTrojan:Win32/Vindor!pz
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32BScope.Backdoor.Berbew
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.71CE4F4A
MAXmalware (ai score=82)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A?

Generic.Dacic.1.Backdoor.Hangup.A.71CE4F4A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment