Categories: Malware

What is “Generic.Dacic.DED21A61.A.13C84F7F”?

The Generic.Dacic.DED21A61.A.13C84F7F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.DED21A61.A.13C84F7F virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generic.Dacic.DED21A61.A.13C84F7F?


File Info:
name: D7C0EC05799211A0B697.mlwpath: /opt/CAPEv2/storage/binaries/a6504b5d6ff83c2f1f598d125aeac35ac91af43780101c5ceb7c3e86c97f460ccrc32: 28E1D647md5: d7c0ec05799211a0b697d586d3d911f9sha1: 81ebe4262d5be014d98974dfeff30b089f46e9f4sha256: a6504b5d6ff83c2f1f598d125aeac35ac91af43780101c5ceb7c3e86c97f460csha512: 6fed3860ba4c65046d9e88e2f8a268e33345604df981693c766b382757341fc524b789ad429a9812029f32d5fbfc7d16b85f555b87bf354515c5c45c280be0f9ssdeep: 1536:FDcfLfIb5Ep1uzgyXVdtnqHNWnnn3CCCCrrDR7Drrr6llllFdddd8:FD2LTnuzgyXVd1mIDdrrrvtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DE937DA5F8919492F45B41388843FBF2A8A6FC24C64DA653FF80BF4F4872A54F92454Bsha3_384: 229cc0e72aaebf82514787ec567743a76b42a85ed11edd0892267a136bf66a472c28619c98264077274222ec96cab735ep_bytes: 558bec6aff6870614000685039400064timestamp: 2017-05-05 08:29:26
Version Info:
Comments: CompanyName: Hello WorldFileDescription: Clien Local RunProcessFileVersion: 10.0.14393.0 (rs1_release.160715-1616)InternalName: hello.exeLegalCopyright: All rights reserved.LegalTrademarks: OriginalFilename: Hello WorldPrivateBuild: ProductName: Hello World® Operating SystemProductVersion: 17.000.14393.08SpecialBuild: Translation: 0x0409 0x04b0

Generic.Dacic.DED21A61.A.13C84F7F also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.m2Bz
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Dacic.DED21A61.A.13C84F7F
FireEye	Generic.Dacic.DED21A61.A.13C84F7F
CAT-QuickHeal	Trojan.Mauvaise.SL1
McAfee	GenericRXBM-PT!D7C0EC057992
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Generic.Dacic.DED21A61.A.13C84F7F
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Nitol.361
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Genus.CZ
Cyren	W32/S-ee8ba259!Eldorado
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
APEX	Malicious
ClamAV	Win.Trojan.Nitol-6335025-0
BitDefender	Generic.Dacic.DED21A61.A.13C84F7F
SUPERAntiSpyware	Trojan.Agent/Gen-ServStart
Avast	Win32:Nitol-B [Trj]
Tencent	Trojan.Win32.Nitol.wa
Sophos	Troj/Agent-AYVZ
Baidu	Win32.Trojan.ServStart.as
F-Secure	Trojan.TR/AD.Nitol.romkq
DrWeb	Trojan.DownLoader24.51669
Zillya	Trojan.ServStart.Win32.16460
TrendMicro	TROJ_NITOL.SMN1
McAfee-GW-Edition	BehavesLike.Win32.Generic.nm
Emsisoft	Generic.Dacic.DED21A61.A.13C84F7F (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.ServStart.F
Jiangmin	Trojan.Generic.bhzka
Google	Detected
Avira	TR/AD.Nitol.romkq
MAX	malware (ai score=84)
Antiy-AVL	Trojan[DDoS]/Win32.Nitol
Xcitium	TrojWare.Win32.Nitol.AHQ@5iwshg
Arcabit	Generic.Dacic.DED21A61.A.13C84F7F
Microsoft	DDoS:Win32/Nitol.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Nitol.R205727
Acronis	suspicious
ALYac	Generic.Dacic.DED21A61.A.13C84F7F
TACHYON	Trojan/W32.Nitol.92894
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_NITOL.SMN1
Rising	Backdoor.Overie!1.C6A2 (CLASSIC)
Ikarus	Trojan.Win32.ServStart
Fortinet	MalwThreat!E1E6IV
AVG	Win32:Nitol-B [Trj]
DeepInstinct	MALICIOUS