Backdoor

How to remove “Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B”?

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B?


File Info:

name: B1E12CF7D5493742D0E6.mlw
path: /opt/CAPEv2/storage/binaries/979ee06f5c4bb57745c9c208b6ac019a9b93466116b644ab605ac6470597695c
crc32: 7ADA49CB
md5: b1e12cf7d5493742d0e61b70f8f9e8bb
sha1: 16a4e2e6b898b119d99d32f07f97818c56364f39
sha256: 979ee06f5c4bb57745c9c208b6ac019a9b93466116b644ab605ac6470597695c
sha512: 01a3e04bb9bb69398873dbe5160cec6ab7790b4bfdaacc4514821c41513ac17eae3d6ea45cd607597842172df9bffc85f96ce8409d9f7af7ebe6aa8202ddaf35
ssdeep: 1536:8mPt8H33WyRnjldGE9K7t6tqqqqiIoH/oV5YMkhohBE8VGh:8mPYHRjldGE47t6tqqqqiZgHUAEQGh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14F836B9AB68407A1D7830372214A69ADF32899371F7782D1C45DC0DE2327FF5677AB88
sha3_384: 347bb461ab6261ee1f13d9261bcf9e73d68e6b7537446e467ec08b547e3c5beb36adcec77639309e04b32d7735e4c8a8
ep_bytes: 90909060909090b800104000bbd08e40
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
DrWebTrojan.Siggen13.42746
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.9458DF6B
ClamAVWin.Trojan.Crypted-29
FireEyeGeneric.mg.b1e12cf7d5493742
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeTrojan-FVOJ!B1E12CF7D549
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.9458DF6B
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWProxy-Program ( 003b8b111 )
K7AntiVirusTrojan ( 005780dd1 )
BitDefenderThetaAI:Packer.61E432B221
VirITWorm.Win32.Berbew.G
CyrenW32/Qukart.L.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.9458DF6B
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.9458DF6B (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
BaiduWin32.Trojan-Spy.Quart.a
ZillyaTrojan.Qukart.Win32.1983345
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.1VR6SI3
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.ZPACK.Gen2
MAXmalware (ai score=87)
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.9458DF6B
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftTrojan:Win32/Vindor!pz
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32BScope.Backdoor.Berbew
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.9458DF6B
TACHYONBackdoor/W32.Padodor
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B?

Generic.Dacic.1.Backdoor.Hangup.A.9458DF6B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment