Categories: Malware

What is “Generic.Dacic.11C08DFC.A.464E89DF”?

The Generic.Dacic.11C08DFC.A.464E89DF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.11C08DFC.A.464E89DF virus can do?

Sample contains Overlay data
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the MetaStealer malware family
Binary compilation timestomping detected
Unusual version info supplied for binary

How to determine Generic.Dacic.11C08DFC.A.464E89DF?


File Info:
name: DD07F0FB389848476CCF.mlwpath: /opt/CAPEv2/storage/binaries/51981e19ebb4894cae54ebc1f52fead201177285015a7401ce862f62869bae7dcrc32: C3454F7Bmd5: dd07f0fb389848476ccf6c73d90cd437sha1: a0dece993b3f26b0c12f31f0936215f3f108b2d7sha256: 51981e19ebb4894cae54ebc1f52fead201177285015a7401ce862f62869bae7dsha512: fab0a27c72cfd82af8c015427e60d3639bcc8cdf36d099ffd9cf37b216993002090a970d6d5347af24bbf47cadc2ae2861e67336e15af773e8c40e4153c5b01assdeep: 3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:J6jiD30sk+wzYZAhunI7x8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10944F60537B9CD11E26A163FD1E6512017BBAA02AA23F70B398717ED0E71714B9173EBsha3_384: 1560d1796d98e01dc44f387b53b1ed668224b556ec0d6e154c5bb8a28214d8a587dccb6f43845403cb632050a4892d2eep_bytes: ff250020400000000000000000000000timestamp: 2067-04-17 16:48:06
Version Info:
Translation: 0x0000 0x04b0Comments: Visual Studio InstallerCompanyName: FileDescription: Microsoft Visual StudioFileVersion: 15.9.28307.1440InternalName: Swingingly.exeLegalCopyright: Microsoft Corporation Copyright ©  2021LegalTrademarks: OriginalFilename: Swingingly.exeProductName: Visual StudioProductVersion: 15.9.28307.1440Assembly Version: 15.9.28307.1440

Generic.Dacic.11C08DFC.A.464E89DF also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	Windows.Trojan.Generic
MicroWorld-eScan	Generic.Dacic.11C08DFC.A.464E89DF
FireEye	Generic.mg.dd07f0fb38984847
Skyhigh	BehavesLike.Win32.Generic.dm
McAfee	AgentTesla-FCYU!DD07F0FB3898
Malwarebytes	RedlineStealer.Spyware.Stealer.DDS
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Spyware ( 0059954d1 )
Alibaba	TrojanSpy:MSIL/RedLine.22134a3c
K7GW	Spyware ( 0059954d1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.GenusT.EFAC
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.RedLine.B
APEX	Malicious
TrendMicro-HouseCall	TrojanSpy.Win32.REDLINE.YXECCZ
ClamAV	Win.Trojan.Generic-9933689-0
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Generic.Dacic.11C08DFC.A.464E89DF
Avast	Win32:PWSX-gen [Trj]
Tencent	Trojan-Psw.Win32.Stealer.16000501
Emsisoft	Generic.Dacic.11C08DFC.A.464E89DF (B)
F-Secure	Heuristic.HEUR/AGEN.1337354
DrWeb	Trojan.PWS.Stealer.35178
Zillya	Trojan.RedLine.Win32.3050
TrendMicro	TrojanSpy.Win32.REDLINE.YXECCZ
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=80)
Google	Detected
Avira	HEUR/AGEN.1337354
Varist	W32/MSIL_Troj.DEJ.gen!Eldorado
Antiy-AVL	Trojan[Spy]/MSIL.RedLine
Kingsoft	MSIL.Trojan-Spy.Stealer.gen
Microsoft	Trojan:MSIL/RedLine.MD!MTB
Arcabit	Generic.Dacic.11C08DFC.A.464E89DF
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
GData	MSIL.Trojan-Stealer.Redline.G
AhnLab-V3	Downloader/Win.FCAR.C4530892
VBA32	Trojan.MSIL.InfoStealer.gen.U
ALYac	Generic.Dacic.11C08DFC.A.464E89DF
TACHYON	Trojan-Spy/W32.DN-InfoStealer.278528.Q
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Stealer.Agent!1.DC63 (CLASSIC)
Yandex	TrojanSpy.RedLine!jM6f7Fsf5l8
Ikarus	Trojan-Spy.MSIL.Redline
Fortinet	MSIL/Agent.CVT!tr
BitDefenderTheta	Gen:NN.ZemsilF.36802.rm2@amKG@Sh
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS