Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.BED5E973 removal guide

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.BED5E973 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.BED5E973 virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.BED5E973?


File Info:

name: FCFDD02507E131216442.mlw
path: /opt/CAPEv2/storage/binaries/21145739a3c42ec25200fa22c8db4081c2fafcde35bf00a23488a11320fd733a
crc32: 3118F75D
md5: fcfdd02507e1312164428903cc96b63f
sha1: 01017f910ba6de5e21429133dc563448518d6090
sha256: 21145739a3c42ec25200fa22c8db4081c2fafcde35bf00a23488a11320fd733a
sha512: 776d7c30763d3e8b22251a37a9dcd0109d64187ed90e11a3239aaa333f2cf4bd72964e0059ff1df9d44ffb07e5fe379771b0e20e8cfa4d20aab5b23f533e98b3
ssdeep: 1536:n1up1h0eKv1ddKjqLEP2E7IqyoJIoggMQ0QtE5YMkhohBE8VGh:n1uDWZddKjqLEP2E7IqyoJN1yQtQUAEb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T167835C66EF401BF1E68F03B127CE49BDB6DC58B537D9D1684488C05C12A7E298BBE6C4
sha3_384: 24874ca43fca04608f182acd3069ce1b9a889cdb125152ead9699ea0b77c3e41b6faf068a64f276c1cd76d6800f2cf64
ep_bytes: 90906090909090b800104000bbd08e40
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.BED5E973 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.BED5E973
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeTrojan-FVOJ!FCFDD02507E1
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusProxy-Program ( 003b8b111 )
K7GWProxy-Program ( 003b8b111 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaAI:Packer.61E432B221
VirITWorm.Win32.Berbew.G
CyrenW32/Qukart.L.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
ClamAVWin.Trojan.Crypted-32
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.BED5E973
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.BED5E973 (B)
BaiduWin32.Trojan-Spy.Quart.a
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebTrojan.Siggen13.42746
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.BED5E973
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.fcfdd02507e13121
SophosTroj/Padodo-Gen
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.1VR6SI3
JiangminTrojan.Generic.dzrgt
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.BED5E973
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftTrojan:Win32/Vindor!pz
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32BScope.Backdoor.Berbew
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.BED5E973
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.10ba6d
DeepInstinctMALICIOUS

How to remove Generic.Dacic.1.Backdoor.Hangup.A.BED5E973?

Generic.Dacic.1.Backdoor.Hangup.A.BED5E973 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment