Backdoor

GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE (file analysis)

Malware Removal

The GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE?


File Info:

name: F3751A956D5C303E5749.mlw
path: /opt/CAPEv2/storage/binaries/14321c65db83a7accb510e597d496fc3c7e7d9f91878127ec77c1e103d3b4d42
crc32: EB939AD1
md5: f3751a956d5c303e57493a3236a028fe
sha1: f5f8c5e7719c1e95eae5f680cc0a6a434a995d09
sha256: 14321c65db83a7accb510e597d496fc3c7e7d9f91878127ec77c1e103d3b4d42
sha512: e92737c68c2949374d34edda392f6e538555b2e88d9719266551551b14168dad7556d1a4d6ee136d14510c05dec679ad2d21058172c1ea318b0afd724ed89470
ssdeep: 1536:kMSKKkXJ/R94kA2fnOh181sTzodche+wLLTlVrSPi/HegJGDiqDe3tz:QMmkOX8uTUdNfLrWPI+aGD3Daz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A836D572B286FA3C9B103B260BF48CAF229D1E915EFC955547CC09E33B7E18A1B5790
sha3_384: cccc3133cdfca64e3d2aa8659e58cc4819db27c8a267f28e55c304f76a1e7c9063d9ae0db8c0a89ef1670e747a05b6dc
ep_bytes: 90909060909067e80000000090909058
timestamp: 2019-11-21 22:06:51

Version Info:

0: [No Data]

GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE also known as:

BkavW32.AIDetectMalware
DrWebBackDoor.HangUp.43791
MicroWorld-eScanGenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE
ClamAVWin.Trojan.Crypted-29
FireEyeGeneric.mg.f3751a956d5c303e
CAT-QuickHealBackdoor.Berbew.A6.MUE
McAfeeArtemis!F3751A956D5C
MalwarebytesCrypt.Trojan.Malicious.DDS
SangforSuspicious.Win32.Save.a
K7AntiVirusProxy-Program ( 003b8b111 )
K7GWProxy-Program ( 003b8b111 )
Cybereasonmalicious.56d5c3
BitDefenderThetaAI:Packer.CA6DF28E21
VirITWorm.Win32.Berbew.G
CyrenW32/Padodor.F.gen!Eldorado
SymantecBackdoor.Berbew.F
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Padodor.NAX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Proxy.Win32.Qukart.gen
BitDefenderGenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE
NANO-AntivirusTrojan.Win32.Qukart.fokxzm
AvastWin32:TrojanX-gen [Trj]
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
TACHYONBackdoor/W32.Padodor
EmsisoftGenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
BaiduWin32.Trojan-Spy.Quart.a
VIPREGenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
Trapminesuspicious.low.ml.score
SophosTroj/Padodo-Fam
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.11RRK8R
JiangminTrojan.Generic.dzrgt
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE
ZoneAlarmTrojan-Proxy.Win32.Qukart.gen
MicrosoftBackdoor:Win32/Berbew.BU
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
VBA32BScope.Backdoor.Berbew
ALYacGenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/Genetic.gen
TencentTrojan-Ransom.Win32.Pornoasset.a
IkarusTrojan-Spy.Win32.Qukart
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE?

GenPack:Generic.Dacic.1.Backdoor.Hangup.A.93CE47FE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment