Backdoor

GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C (file analysis)

Malware Removal

The GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C?


File Info:

name: CB76805E763ABC110CA3.mlw
path: /opt/CAPEv2/storage/binaries/1acdf726b5c4d1a2f1c00ef7535ccbf416d8bffc61a2caf5e1fc9196804ee718
crc32: B9A463F9
md5: cb76805e763abc110ca3af1db191343f
sha1: 52d9279b5439b0c70215da043b8d1659eb691ed3
sha256: 1acdf726b5c4d1a2f1c00ef7535ccbf416d8bffc61a2caf5e1fc9196804ee718
sha512: 29612d150f29602b35ee79813ba0cefc9d70b2fc59770d72a78b0a976d3f5abfc7883a2f095f1a766654e14ce3757796ae6a0945e6291ec09127115e181e4463
ssdeep: 1536:r7kOJXBXXVUFNf1kw7ksCbKWQZ8ZrI1jHJZrR:fBJXBXSFNx7kshWQuu1jHJ9R
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DE837C5A822FCFB3C44411B41A964EE2E1D503BF1676C88E28E4C24D33FF5687665BE5
sha3_384: 46a0c703548c16597a9d0fdb1c1b7ee3473f7ed6c0e857bb11d4b494920a5c79d619d404e1bc1989772fab339dd7ade3
ep_bytes: 90906090909067e80000000090589090
timestamp: 2014-05-31 22:06:51

Version Info:

0: [No Data]

GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C
ClamAVWin.Trojan.Crypted-30
CAT-QuickHealBackdoor.Berbew.A6.MUE
ALYacGenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C
MalwarebytesCrypt.Trojan.Malicious.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.e763ab
ArcabitGenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
CyrenW32/Kryptik.JEE.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Ransom.Win32.Pornoasset.a
EmsisoftGenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.HangUp.43791
VIPREGenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C
TrendMicroTROJ_GEN.R03BC0DEL23
McAfee-GW-EditionBehavesLike.Win32.Generic.lh
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.cb76805e763abc11
SophosTroj/Padodo-Fam
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.XDR.Gen
MAXmalware (ai score=83)
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
GDataWin32.Trojan.PSE.11RRK8R
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
McAfeeGenericRXVP-YB!CB76805E763A
TACHYONBackdoor/W32.Padodor
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DEL23
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
BitDefenderThetaAI:Packer.8F75DE7C21
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C?

GenPack:Generic.Dacic.1.Backdoor.Hangup.A.38CE688C removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment