Backdoor:Win32/Berbew!pz malicious file

The Backdoor:Win32/Berbew!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Berbew!pz virus can do?

Creates an indicator observed in Territorial Disputes report SIG40
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Backdoor:Win32/Berbew!pz?


File Info:
name: E62EC1F86FA0C0225DDC.mlw
path: /opt/CAPEv2/storage/binaries/40c6c2ee1df6073517269bac8ff85b8f2d57279a87fd1e3e122d9bdf2bfdd296
crc32: 70AC8308
md5: e62ec1f86fa0c0225ddca79dc228520c
sha1: 232e496d2853e4af0e53300f6bea732dfe2af9a5
sha256: 40c6c2ee1df6073517269bac8ff85b8f2d57279a87fd1e3e122d9bdf2bfdd296
sha512: ba335fdd7ba9a46187c196ea37fd5131847091cb7c0cbe11971ad155bf51f75d024dfaf878ce5bec47999e62a7df39b3130454dbd3024d43f33413b9e630bb76
ssdeep: 1536:3GsPMQ5qR6tPuxT6o0ZlhjChdo2zNCyVso:Hd04Bpl9Co20eso
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T131434BC7F2B60D93C68707F3257EC161F63594A223BDE53299AD805F35B1A2708B6712
sha3_384: 50da334f9b32f682a35a777e75b664bb2dfc635f1cea8e6a9d58f050bcbf808d690f75a90698349e8822377443c00e67
ep_bytes: 906090b800104000909090906a049090
timestamp: 2023-07-29 18:29:59

Version Info:
0: [No Data]

Backdoor:Win32/Berbew!pz also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	GenPack:Backdoor.Hangup.B
FireEye	Generic.mg.e62ec1f86fa0c022
Skyhigh	BehavesLike.Win32.Generic.qh
McAfee	Trojan-FVOJ!E62EC1F86FA0
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	GenPack:Backdoor.Hangup.B
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005780dd1 )
K7GW	Trojan ( 005780dd1 )
Cybereason	malicious.d2853e
Arcabit	GenPack:Backdoor.Hangup.B
Baidu	Win32.Trojan-Spy.Quart.a
VirIT	Worm.Win32.Berbew.G
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Qukart
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Obfus-38
Kaspersky	Trojan-Spy.Win32.Qukart.af
BitDefender	GenPack:Backdoor.Hangup.B
NANO-Antivirus	Trojan.Win32.Qukart.kbseyx
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan-Ransom.Win32.Pornoasset.a
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Spy.Qukart.NB
DrWeb	BackDoor.HangUp.43832
Trapmine	malicious.high.ml.score
Emsisoft	GenPack:Backdoor.Hangup.B (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Qukart.ajbr
Varist	W32/Qukart.K.gen!Eldorado
Avira	TR/Spy.Qukart.NB
MAX	malware (ai score=89)
Antiy-AVL	Trojan[Proxy]/Win32.Qukart.gen
Kingsoft	malware.kb.a.1000
Microsoft	Backdoor:Win32/Berbew!pz
ZoneAlarm	Trojan-Spy.Win32.Qukart.af
GData	GenPack:Backdoor.Hangup.B
Google	Detected
AhnLab-V3	Win-Trojan/Berbew.51712
Acronis	suspicious
BitDefenderTheta	AI:Packer.806D3CE11D
ALYac	GenPack:Backdoor.Hangup.B
TACHYON	Backdoor/W32.Padodor
VBA32	BScope.Backdoor.Berbew
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Backdoor.Berbew!1.AE0A (CLASSIC)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.BJQV!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Backdoor:Win32/Berbew!pz?

Backdoor:Win32/Berbew!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X