Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5 (file analysis)

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5 virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5?


File Info:

name: FB7CA802B46DEF483BA3.mlw
path: /opt/CAPEv2/storage/binaries/cb095669361b2b449f0a584b27a2a2a94039df6d737f3d156e2b4aef4ab6e8b1
crc32: FD0B3A9D
md5: fb7ca802b46def483ba38f903574db92
sha1: bb4614d1eebc0ffbdcfb942e7388b49553ff62e8
sha256: cb095669361b2b449f0a584b27a2a2a94039df6d737f3d156e2b4aef4ab6e8b1
sha512: 8265efda4b10fbf6ff485bb6f6dd3fdf11fb097325c454c00b62bb969f6739470a92f771e66711a7019c6771f625a64266c5848f3373251e2f4b5d7c1f0c2abc
ssdeep: 3072:6vYggILvK+zJXO4sOBiMG7+AURfE+HrkeJ:6QQLvK+zQ0oMG7Gs+HoU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A6045BBBFFB93FA2C74801B6D1EA1691EA38C0691E9E43546414C289167B53CF57BB30
sha3_384: e17349ec3d8a0060832c27c2c34e170e550b381460ad369533f1509188dda1a45ae0ef3c66800e75bd660b540cfd8189
ep_bytes: 609090909090b8001040009090bb6c8f
timestamp: 2017-02-24 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.78B3CFE5
ClamAVWin.Trojan.Crypted-28
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeTrojan-FVOJ!FB7CA802B46D
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Qukart.Win32.1042082
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.78B3CFE5
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.78B3CFE5 (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.78B3CFE5
McAfee-GW-EditionBehavesLike.Win32.Backdoor.ch
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.fb7ca802b46def48
SophosTroj/Padodo-Fam
IkarusTrojan.Crypt
GDataWin32.Trojan.PSE.11RRK8R
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.78B3CFE5
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.C1F0D5F821
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.78B3CFE5
MAXmalware (ai score=89)
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
YandexTrojan.PR.Qukart!MRIP3jtd7Kk
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.1eebc0
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5?

Generic.Dacic.1.Backdoor.Hangup.A.78B3CFE5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment