Backdoor

Should I remove “Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0”?

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0 virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0?


File Info:

name: 0F9D4B7535C30BC77736.mlw
path: /opt/CAPEv2/storage/binaries/5e6856ad12373784fc7545d7e632a3663a63931509174c937c61020b79288448
crc32: DA1ACEF7
md5: 0f9d4b7535c30bc777366ee0fa7857bc
sha1: c1c19c6b5fcf1e5a0c74b487859b28b11343686f
sha256: 5e6856ad12373784fc7545d7e632a3663a63931509174c937c61020b79288448
sha512: 5aa15a4fe0f41b5f17a000bc458a077586761109f130267d0f4008788fa9abc242cb8f012cde5193f0951d5f9052fd5ea6be4faf44b44c25fca24ad294b22980
ssdeep: 1536:sqL+J8mO1i/xz7R/qD5x0Pu85uKm7oE87xoUOAPgnDNBrcN4i6tBYuR3PlNPMAZ:sQli/xz7R/qD5x07uKm7n6dOAPgxed6l
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T141A34BFBB2051B67C3A13173EA5AC5E1E3399175D26A8D44246CC01CE3BBE5892FE781
sha3_384: be261eda55b92db4dbea39be35e73eb7fd5f46524274048b18f00b9cffe73e11fd15277e62a5eae2d14e72d4d4b2f117
ep_bytes: 906090909090b8001040009090bb6c8f
timestamp: 2018-07-09 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.75FD0AC0
ClamAVWin.Trojan.Crypted-30
FireEyeGeneric.mg.0f9d4b7535c30bc7
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeGenericRXVP-YB!0F9D4B7535C3
MalwarebytesCrypt.Trojan.Malicious.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.535c30
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.75FD0AC0
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.75FD0AC0 (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.75FD0AC0
TrendMicroTROJ_GEN.R03BC0CEL23
McAfee-GW-EditionBehavesLike.Win32.Generic.nh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Fam
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.11RRK8R
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.75FD0AC0
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
BitDefenderThetaAI:Packer.296DA1BE21
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.75FD0AC0
MAXmalware (ai score=80)
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0CEL23
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0?

Generic.Dacic.1.Backdoor.Hangup.A.75FD0AC0 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment