Trojan

What is “TrojanDownloader:Win32/Berbew!pz”?

Malware Removal

The TrojanDownloader:Win32/Berbew!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Berbew!pz virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Binary compilation timestomping detected
  • Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanDownloader:Win32/Berbew!pz?


File Info:

name: A60DC0C22F41056432C4.mlw
path: /opt/CAPEv2/storage/binaries/76f7a885043e0d8782861cbed24fa296573299efecdaf547d17513157105dd0e
crc32: DB52631A
md5: a60dc0c22f41056432c4700a941a2e7d
sha1: 508bc1a4f030893b8101c3f33ffd99dd79d39b38
sha256: 76f7a885043e0d8782861cbed24fa296573299efecdaf547d17513157105dd0e
sha512: d3a1bef8dd5d41d1fd6510732953109d05c5cf52fe6270e5472450b681f1c4543f0266f5fa7e95987fa2bce645dc8dab79ced9cbfb8fda650f4311de43622be2
ssdeep: 1536:q27Xkr1GuVg0I9gTTlWrGTMPSLuWE0vD49FA4wgge2A6Vy/YwNein/GFZCeDAyY:q2Yr7g03m9u4me2A6KBNFn/GFZC1yY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T121638E8F229A0737C2770277754645EFA1AAB7A50396CD9008DCC1DD2222B7CC7BA787
sha3_384: d402012167c067fbc455e2e395cbb2f195357fe8a89cf3e0dac21d98fe6d32b2fc54aa2d73b6f1beb481825360a56419
ep_bytes: 90909090906067e80000000090909090
timestamp: 2027-09-06 18:29:59

Version Info:

0: [No Data]

TrojanDownloader:Win32/Berbew!pz also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
DrWebBackDoor.HangUp.43832
MicroWorld-eScanGenPack:Backdoor.Hangup.B
FireEyeGeneric.mg.a60dc0c22f410564
SkyhighBehavesLike.Win32.Generic.kh
McAfeeGenericRXVP-YB!A60DC0C22F41
MalwarebytesGeneric.Malware.AI.DDS
VIPREGenPack:Backdoor.Hangup.B
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.4f0308
BitDefenderThetaAI:Packer.335DE3CA21
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
ClamAVWin.Trojan.Crypted-31
KasperskyTrojan-Spy.Win32.Qukart.af
BitDefenderGenPack:Backdoor.Hangup.B
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Pornoasset.a
TACHYONBackdoor/W32.Padodor
SophosMal/Padodor-A
GoogleDetected
F-SecureTrojan.TR/Spy.Qukart.NB
BaiduWin32.Trojan-Spy.Quart.a
ZillyaTrojan.QukartGen.Win32.2
Trapminemalicious.high.ml.score
EmsisoftGenPack:Backdoor.Hangup.B (B)
IkarusTrojan.Spy.Qukart
GDataWin32.Trojan.PSE.1F7XEZ6
JiangminTrojanSpy.Qukart.ahel
VaristW32/Qukart.K.gen!Eldorado
AviraTR/Spy.Qukart.NB
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
ArcabitGenPack:Backdoor.Hangup.B
ZoneAlarmTrojan-Spy.Win32.Qukart.af
MicrosoftTrojanDownloader:Win32/Berbew!pz
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
ALYacGenPack:Backdoor.Hangup.B
MAXmalware (ai score=85)
VBA32BScope.Backdoor.Berbew
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
SentinelOneStatic AI – Malicious PE
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove TrojanDownloader:Win32/Berbew!pz?

TrojanDownloader:Win32/Berbew!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment