Backdoor

Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA information

Malware Removal

The Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA?


File Info:

name: C8A1207BCF93CA8B5CBB.mlw
path: /opt/CAPEv2/storage/binaries/649b05ea657a1ee59c380e46fdfae72e62a91533986414406f8267ac760608e5
crc32: 79C479B8
md5: c8a1207bcf93ca8b5cbbf47ee4bef97c
sha1: c78ecd21e648d6cd3143b1420b01f8f060a1cd15
sha256: 649b05ea657a1ee59c380e46fdfae72e62a91533986414406f8267ac760608e5
sha512: 6fbe03b518a6e82fd6d2105a66f7e7c2a08d9a039a1713eaa46ca958f67555bbd27dfb7d7b8a891fcac9ce5069d140abb994073267b0e84c10794b4a6140de60
ssdeep: 1536:jMg4fqDpH1rWTRsMCgxVe9Ji5ah5YMkhohBE8VGh:jMgj/8CpzUAEQGh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A834A3772C41BB3C7C302F7329644E6F63697BF2365A88054A9912D221786852FEBF1
sha3_384: d99a16f8a6512d08b1732985d5b1e042639742515dd12662cd1b033c5c4f0f35ad3ed219b89d4102ce311ed375b64404
ep_bytes: 909060909090b8001040009090bbd08e
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
DrWebTrojan.Siggen13.42746
MicroWorld-eScanGeneric.Dacic.1.Backdoor.Hangup.A.D32CF2BA
ClamAVWin.Trojan.Crypted-30
FireEyeGeneric.mg.c8a1207bcf93ca8b
CAT-QuickHealBackdoor.Berbew.A6.MUE
ALYacGeneric.Dacic.1.Backdoor.Hangup.A.D32CF2BA
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.1.Backdoor.Hangup.A.D32CF2BA
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.1e648d
BitDefenderThetaAI:Packer.61E432B221
VirITWorm.Win32.Berbew.G
CyrenW32/Qukart.L.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGeneric.Dacic.1.Backdoor.Hangup.A.D32CF2BA
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
EmsisoftGeneric.Dacic.1.Backdoor.Hangup.A.D32CF2BA (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
BaiduWin32.Trojan-Spy.Quart.a
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
IkarusTrojan-Spy.Win32.Qukart
GDataWin32.Trojan.PSE.1VR6SI3
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.1.Backdoor.Hangup.A.D32CF2BA
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftTrojan:Win32/Vindor!pz
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
McAfeeTrojan-FVOJ!C8A1207BCF93
MAXmalware (ai score=84)
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA?

Generic.Dacic.1.Backdoor.Hangup.A.D32CF2BA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment