Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC removal instruction

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC?


File Info:

name: 16728FA0E2F4EED8683F.mlw
path: /opt/CAPEv2/storage/binaries/444bb4dcd987b582f63715ab6ffb70d4335aa6ccb8f242c2001078da075eb0aa
crc32: DC89511B
md5: 16728fa0e2f4eed8683f06bb12ad97ed
sha1: a38d2f063a0dd87ec00d316758c1b91ffb904413
sha256: 444bb4dcd987b582f63715ab6ffb70d4335aa6ccb8f242c2001078da075eb0aa
sha512: 995d00be1ff6ec9f8fea25630aa33960715f957f79a7f17a14913495fef0348dbbf60cb3dd72e10d142d48a19b5e9f4c1c82f853699b612821d7e52d67bbb323
ssdeep: 24576:hpfyvzecvHPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWAU:hpfyvKcvXbazR0vKLXZ6U
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15D75AE13FA57A932C09B1275227F5F31D06DCCE98F2341E309989AF1EAA52C355B43E6
sha3_384: ff2c4087e62238f0b442f98aa544d8cc5e987348d29258ac22d56464131fa82e32b50f251d71baefcf15b559fe2c5664
ep_bytes: 90909060909090b800104000bb6c8f40
timestamp: 2021-04-04 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.B49B03CC
FireEyeGeneric.mg.16728fa0e2f4eed8
CAT-QuickHealBackdoor.Berbew.A6.MUE
SkyhighBehavesLike.Win32.Generic.tc
McAfeeTrojan-FVOJ!16728FA0E2F4
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Padodor.Win32.344895
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.63a0dd
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.B49B03CC
BitDefenderThetaAI:Packer.ABFF2A9921
VirITWorm.Win32.Berbew.G
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Padodor.NAX
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Crypted-29
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.B49B03CC
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.B49B03CC (B)
BaiduWin32.Trojan-Spy.Quart.a
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.B49B03CC
TrendMicroTROJ_GEN.R03BC0CKH23
Trapminemalicious.high.ml.score
SophosTroj/Agent-BGRP
IkarusTrojan-Spy.Win32.Qukart
JiangminTrojan.Generic.dzrgt
VaristW32/Agent.HJI.gen!Eldorado
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
GDataWin32.Trojan.PSE.11RRK8R
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32BScope.Backdoor.Berbew
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.B49B03CC
MAXmalware (ai score=87)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0CKH23
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
YandexTrojan.PR.Qukart!7x4N/APncCU
SentinelOneStatic AI – Malicious PE
MaxSecureProxy.Qukart.gen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC?

Generic.Dacic.1.Backdoor.Hangup.A.B49B03CC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment