Categories: Malware

About “Generic.Dacic.CCCE62A1.A.E2B97ABF” infection

The Generic.Dacic.CCCE62A1.A.E2B97ABF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.CCCE62A1.A.E2B97ABF virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Hungarian
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Attempts to identify installed AV products by installation directory
Checks for the presence of known devices from debuggers and forensic tools
Checks for the presence of known devices from debuggers and forensic tools
Harvests information related to installed mail clients
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.CCCE62A1.A.E2B97ABF?


File Info:
name: E00BEED71AF720843F9B.mlwpath: /opt/CAPEv2/storage/binaries/41c5c5f6a5528afbf66411400a65cd95360a11b22b66d1ebd2fa061e1080f110crc32: E748A53Dmd5: e00beed71af720843f9bbdb4e4c0a39esha1: fbdb690740c07b8ae10f3a939a3ef292b0e9ca75sha256: 41c5c5f6a5528afbf66411400a65cd95360a11b22b66d1ebd2fa061e1080f110sha512: a5929bb6c014dceea756a899b91e97a3ac5662bff9d9a3ec730021e867dd14077c3d85ff34168ea5df0df5b20109a84c11b46dc3f8f9e253a1da8e5560777d27ssdeep: 6144:clKKZ74u67nrJI0IPCRUGtzpb85aFG6FPSe:clr54u8nr6CDtzpbKaFbFPSetype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19524122BD2D18B4AE6C47171D78FF6BB78A5AC3806571FD6EE1A384BB9743322101A41sha3_384: 31b9aef391ed44da9757201728cfef8dd49e7bc1070437f8e3ba15820b4ec82f18c3f7bbdef3fc51ecee8bb6b98e1ce5ep_bytes: 60be00f044008dbe0020fbffc7870c27timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Generic.Dacic.CCCE62A1.A.E2B97ABF also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Bingoml.4!c
MicroWorld-eScan	Generic.Dacic.CCCE62A1.A.E2B97ABF
FireEye	Generic.mg.e00beed71af72084
CAT-QuickHeal	Worm.Soltern.A.mue
ALYac	Generic.Dacic.CCCE62A1.A.E2B97ABF
Cylance	unsafe
VIPRE	Generic.Dacic.CCCE62A1.A.E2B97ABF
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00571c561 )
Alibaba	Malware:Win32/km_28042e.None
K7GW	Trojan ( 00571c561 )
CrowdStrike	win/malicious_confidence_100% (W)
Baidu	Win32.Trojan.Agent.aaw
VirIT	Worm.Win32.SOLTERN
Cyren	W32/Soltern.XTTM-0634
Symantec	W32.Forlorn@mm
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/Soltern.E
APEX	Malicious
ClamAV	Win.Worm.Soltern-8
Kaspersky	HEUR:Trojan.Win32.Bingoml.gen
BitDefender	Generic.Dacic.CCCE62A1.A.E2B97ABF
NANO-Antivirus	Trojan.Win32.Soltern.fsjh
Avast	Win32:Malware-gen
Emsisoft	Generic.Dacic.CCCE62A1.A.E2B97ABF (B)
F-Secure	Worm.WORM/Soltern.E
DrWeb	Trojan.Packed.20771
Zillya	Worm.Soltern.Win32.2
TrendMicro	WORM_SOLTERN.E
McAfee-GW-Edition	W32/Sytro.worm.gen!p2p
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-R
Ikarus	Worm.Win32.Soltern
GData	Generic.Dacic.CCCE62A1.A.E2B97ABF
Jiangmin	Trojan.Cosmu.akt
Avira	WORM/Soltern.E
Antiy-AVL	Trojan/Win32.Cosmu
Xcitium	Worm.Win32.Soltern.E@4b7h
Arcabit	Generic.Dacic.CCCE62A1.A.E2B97ABF
ZoneAlarm	HEUR:Trojan.Win32.Bingoml.gen
Microsoft	Worm:Win32/Soltern.E@mm
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Banker.R416600
Acronis	suspicious
McAfee	W32/Sytro.worm.gen!p2p
MAX	malware (ai score=80)
VBA32	BScope.TrojanDropper.Delf
Malwarebytes	Soltern.Worm.Spreader.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	WORM_SOLTERN.E
Rising	Worm.Soltern!8.1B8 (TFE:5:uTOUKHmtIlO)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Soltern.E!worm
BitDefenderTheta	AI:Packer.3B745A8B21
AVG	Win32:Malware-gen
Cybereason	malicious.71af72
DeepInstinct	MALICIOUS