Malware

What is “Generic.Dacic.AB13442E.A.EA0028CA”?

Malware Removal

The Generic.Dacic.AB13442E.A.EA0028CA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.AB13442E.A.EA0028CA virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.AB13442E.A.EA0028CA?


File Info:

name: A982DDAC322435CB6375.mlw
path: /opt/CAPEv2/storage/binaries/014968b6730550038774e7f634305d47c90d70a9ea9470add0a672483075c1a8
crc32: B4317152
md5: a982ddac322435cb637547233eaf1c20
sha1: 30c3a01f43ab58b4e473ab1272bd5358214aba3f
sha256: 014968b6730550038774e7f634305d47c90d70a9ea9470add0a672483075c1a8
sha512: 070a4a594b16d2206847502a5cd1e37b3228e2f1da4cfe81730b2eb8a9257b49bf45ce5d98b812bf9da4c5a8a30f07096fac5b5397ab83692fc149fdc46876d1
ssdeep: 3072:8RZsZuNKL8M0D3YKyStSSc1hF4DGb+C8fo3PXl9Z7S/yCsKh2EzZA/z:ImZuNM8rRypScXF4Cb+Cgo35e/yCthvu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T137B37DAF72410BB2CAC101F6279B8492BB26D167137B85C84964C1CD2D27DF9DA3BB58
sha3_384: 5ea36e2ed321f458641f5dbfe397dfed8dcd6322427d3518f20edbdbd81e63d2cb9063ad6edfea5d1196b1a54790da4d
ep_bytes: 90909060909067e80000000058909090
timestamp: 1980-09-26 05:39:38

Version Info:

0: [No Data]

Generic.Dacic.AB13442E.A.EA0028CA also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGeneric.Dacic.AB13442E.A.EA0028CA
ClamAVWin.Trojan.Crypted-29
FireEyeGeneric.mg.a982ddac322435cb
ALYacGeneric.Dacic.AB13442E.A.EA0028CA
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.AB13442E.A.EA0028CA
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/Backdoor.DKIC-2994
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Padodor.AB
APEXMalicious
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGeneric.Dacic.AB13442E.A.EA0028CA
AvastWin32:Padodor-V [Trj]
TencentTrojan.Win32.Qukart.ya
TACHYONBackdoor/W32.Padodor
SophosTroj/Padodo-Gen
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebBackDoor.Wdozer
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
Trapminemalicious.high.ml.score
EmsisoftGeneric.Dacic.AB13442E.A.EA0028CA (B)
IkarusTrojan.Crypt
GDataGeneric.Dacic.AB13442E.A.EA0028CA
JiangminBackdoor.Padodor.etpf
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGeneric.Dacic.AB13442E.A.EA0028CA
ZoneAlarmBackdoor.Win32.Padodor.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
MAXmalware (ai score=88)
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!8.115 (TFE:2:3hmW7UamyhT)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
BitDefenderThetaAI:Packer.44E7344521
AVGWin32:Padodor-V [Trj]
Cybereasonmalicious.c32243
DeepInstinctMALICIOUS

How to remove Generic.Dacic.AB13442E.A.EA0028CA?

Generic.Dacic.AB13442E.A.EA0028CA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment