Generic.Dacic.1.BitCoinMiner.A.445C0F78 information

The Generic.Dacic.1.BitCoinMiner.A.445C0F78 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.1.BitCoinMiner.A.445C0F78 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Drops a binary and executes it
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• A scripting utility was executed
• Uses Windows utilities for basic functionality
• Deletes its original binary from disk
• Installs itself for autorun at Windows startup
• Installs itself for autorun at Windows startup
• CAPE detected the CoinMiner02 malware family
• Created a service that was not started
• Uses suspicious command line tools or Windows utilities

How to determine Generic.Dacic.1.BitCoinMiner.A.445C0F78?

File Info:
name: CA1BC438E508D0BF8FA7.mlw
path: /opt/CAPEv2/storage/binaries/8e355b2f415cd0c7a2c52c45baa9119e5561dd4b218084df89f905811a63a437
crc32: 1698B9D0
md5: ca1bc438e508d0bf8fa76b8eac22a504
sha1: a5f09b5fa97aa1597ff2bcab213ae4de31885dd0
sha256: 8e355b2f415cd0c7a2c52c45baa9119e5561dd4b218084df89f905811a63a437
sha512: 928ed1e3cbbb20f489be1bdd81182c9a231f2e22d05ce4ee36a9b9eee52637c793e743f6542653cf7b38bba2fa47bb1816e8dd53f3d3bf60ecd171ab5faabc37
ssdeep: 98304:5nFwdvTqoLuUTK7KEVsaL9JMYxK/z8n43jhrxPQR:zwdvTqsuUI9TEtP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T132163380E29E5B02DD922C3188624DA7876DCF72D1E238756984BBDA7E53FC77E0065C
sha3_384: 5c23d1e5d78bda52f1eeb618df9a26a7a93dd83c17bdf86051c4efd32ff8b0f3f7ab04101415e58048c496d12c2f4816
ep_bytes: 60be0010d8008dbe000068ff5789e58d
timestamp: 2022-07-10 17:06:20

Version Info:
FileVersion: 1.0.0.0
FileDescription: 安全防护中心模块
ProductName: 安全防护中心模块
ProductVersion: 1.0.0.0
CompanyName: www.360.cn
LegalCopyright: (C)360.cn ALL Rights Reserved.
Comments: 安全防护中心模块
Translation: 0x0804 0x04b0

Generic.Dacic.1.BitCoinMiner.A.445C0F78 also known as:

How to remove Generic.Dacic.1.BitCoinMiner.A.445C0F78?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.