Categories: Malware

Should I remove “Generic.Dacic.D6DFC400.A.D5CD5D31”?

The Generic.Dacic.D6DFC400.A.D5CD5D31 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.D6DFC400.A.D5CD5D31 virus can do?

Behavioural detection: Executable code extraction – unpacking
Uses Windows utilities for basic functionality
CAPE extracted potentially suspicious content
Creates an autorun.inf file
Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the NjRATGolden malware family
Creates a copy of itself
Creates known Njrat/Bladabindi RAT registry keys
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.D6DFC400.A.D5CD5D31?


File Info:
name: 53F06B7E8033EBF12584.mlwpath: /opt/CAPEv2/storage/binaries/a91f4cbebde46ac5907e4822c02a174e2fec90f4a13e8f1d18fec0745f28c2c9crc32: BFFA3942md5: 53f06b7e8033ebf1258425b03a77971asha1: d9d7b38f4e023ca388ab36f0afc1aef4e0cc02ecsha256: a91f4cbebde46ac5907e4822c02a174e2fec90f4a13e8f1d18fec0745f28c2c9sha512: 4f70798830f061c96dd375488de6b438bbda33653504cc342725ad7723b0158ef94905c447f7fb3608fa50879a57dc0e3a466aa90afbb9f9d55d35230531b8d0ssdeep: 384:7draoixJ9l7OHg1WykrFV3pk8emT2JrAF+rMRTyN/0L+EcoinblneHQM3epzXA90:Jr+R1NkrFV6NmArM+rMRa8NuMmFttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B0033B4D7FE18168C5FD167B05B2D0120BBAE14B6E23D90E8EE5649A37735C18F50AF2sha3_384: b61148d7da9626ec449326ee0cf87717fed45aa4e3ff2ecc13c7f6cd08a924d65ae9fbdf2dfca05adfebfbb54203d99aep_bytes: ff250020400000000000000000000000timestamp: 2023-11-20 14:40:25
Version Info:
0: [No Data]

Generic.Dacic.D6DFC400.A.D5CD5D31 also known as:

Cynet	Malicious (score: 100)
CAT-QuickHeal	Backdoor.Bladabindi.B3
ALYac	Generic.Dacic.D6DFC400.A.D5CD5D31
Cylance	unsafe
VIPRE	Generic.Dacic.D6DFC400.A.D5CD5D31
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Generic.Dacic.D6DFC400.A.D5CD5D31
K7GW	Trojan ( 700000121 )
Cybereason	malicious.f4e023
Arcabit	Generic.Dacic.D6DFC400.A.D5CD5D31
Baidu	MSIL.Backdoor.Bladabindi.a
VirIT	Trojan.Win32.DownLoader21.BPQW
Symantec	Backdoor.Ratenjay!gen3
Elastic	Windows.Trojan.Njrat
ESET-NOD32	a variant of MSIL/Bladabindi.AR
APEX	Malicious
ClamAV	Win.Packed.Bladabindi-7994427-0
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Bladabindi.jtwdwz
MicroWorld-eScan	Generic.Dacic.D6DFC400.A.D5CD5D31
Tencent	Trojan.Msil.Bladabindi.fa
Ad-Aware	Generic.Dacic.D6DFC400.A.D5CD5D31
Sophos	Troj/Bbindi-W
F-Secure	Trojan.TR/ATRAPS.Gen
DrWeb	Trojan.MulDrop6.46023
Zillya	Trojan.Bladabindi.Win32.73617
TrendMicro	BKDR_BLADABI.SMC
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.53f06b7e8033ebf1
Emsisoft	Worm.Bladabindi (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Autoit.dce
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Backdoor]/MSIL.Bladabindi.as
Xcitium	TrojWare.MSIL.Spy.Agent.CP@4pqytu
Microsoft	Trojan:MSIL/njRAT.RDSA!MTB
GData	MSIL.Trojan-Spy.Bladabindi.BQ
Google	Detected
AhnLab-V3	Trojan/Win32.Korat.R207428
McAfee	Trojan-FIGN
TACHYON	Backdoor/W32.DN-NjRat.37888.AG
DeepInstinct	MALICIOUS
VBA32	Trojan.MSIL.Bladabindi.Heur
Malwarebytes	Bladabindi.Backdoor.Bot.DDS
Panda	Trj/GdSda.A
Zoner	Trojan.Win32.84773
Rising	Backdoor.njRAT!1.9E49 (CLASSIC)
Yandex	Trojan.AvsMofer.dd6520
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Bladabindi.AS!tr
BitDefenderTheta	Gen:NN.ZemsilF.36792.cmW@aG6Yxsj
AVG	MSIL:Bladabindi-JK [Trj]
Avast	MSIL:Bladabindi-JK [Trj]
CrowdStrike	win/malicious_confidence_100% (D)