Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.C5A54680 removal

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.C5A54680 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.C5A54680 virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.C5A54680?


File Info:

name: 15F7E70F687FCA8F99F1.mlw
path: /opt/CAPEv2/storage/binaries/79e58395b8639c4cb58e5a0e2e6211e7eb8e66ea73bb95c3e7d68cc7eb615b68
crc32: F9EA1919
md5: 15f7e70f687fca8f99f11b1c4bc39ce5
sha1: efb340cc8430ea669c6f8ba7a01294778cf2f7e5
sha256: 79e58395b8639c4cb58e5a0e2e6211e7eb8e66ea73bb95c3e7d68cc7eb615b68
sha512: 57a54b2614b1d6c92bba1353cd49b99befb4bf7f646f2c3cebc9b0f6c589514d3ef5f5014cdd236b65c13aabf1d121005ea6243da83d025c99296570dd68c792
ssdeep: 1536:i7IaQzOX+/xAa9RA8sDI8XpSrdi2oiJi4O1ql14DEr5BiMG7e:ivQP/xAazAjDI8iQtiJXO4sOBiMG7e
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15D838D0BA554DF72C3C532B52737A8C5EB580CB9937AD8505898F04F1333E9A92BBB91
sha3_384: 11afc45f24e08c7c9ca85e327d6f69a517f593c3957d862df4abcb7484a025b69f18bb88bc94c8dd7af760ca11c65c40
ep_bytes: 90906090909090b800104000bb6c8f40
timestamp: 2017-02-24 22:06:51

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.C5A54680 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Qukart.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.C5A54680
FireEyeGeneric.mg.15f7e70f687fca8f
CAT-QuickHealBackdoor.Berbew.A6.MUE
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.C5A54680
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Berbew.36d
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.f687fc
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.C5A54680
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.C5A54680 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen2
DrWebBackDoor.HangUp.43791
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.C5A54680
TrendMicroTROJ_GEN.R002C0CEE23
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Fam
IkarusTrojan-Spy.Win32.Qukart
JiangminTrojan.Generic.dzrgt
GoogleDetected
AviraTR/Crypt.XPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.C5A54680
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
McAfeeGenericRXVP-YB!15F7E70F687F
MAXmalware (ai score=100)
VBA32BScope.Backdoor.Berbew
MalwarebytesVirlock.Ransom.FileInfector.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0CEE23
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Generic.Dacic.1.Backdoor.Hangup.A.C5A54680?

Generic.Dacic.1.Backdoor.Hangup.A.C5A54680 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment