Trojan

What is “TrojanDownloader:Win32/Berbew!pz”?

Malware Removal

The TrojanDownloader:Win32/Berbew!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Berbew!pz virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Berbew!pz?


File Info:

name: 698B36C1CF1A2AEEB4EA.mlw
path: /opt/CAPEv2/storage/binaries/b89578725a86578e8df033e023e274dd49d21268ab60e92e697b26c00930aabe
crc32: 1BA94BBF
md5: 698b36c1cf1a2aeeb4ea7e49f1a7d590
sha1: c9531915eb739395da7cc838ef03637795685a5f
sha256: b89578725a86578e8df033e023e274dd49d21268ab60e92e697b26c00930aabe
sha512: f4f71a12af7ee6dcc05b950ffefb187a63a9839d476e554305aa7684eb38dc1fff990cf3221b85ece05b02da4f1820ef750a5f10ff8f70b4f90eab5413be764e
ssdeep: 768:E5EsFxKP8Sjy6BhvQdRGhXv5zN+6kjuiw1VxmnKPJZ/1H5GP5nf1fZMEBFELvkVB:Enx08z68CXv5zN+s59eSBeNCyVso
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CA438BEB21774493C88306B7C7B979D72A3274A9CF7168596890711E290F7783772BC2
sha3_384: 4e12e9a5c85cf117131895e3f4d115ae7170df8e7cf722d55d659f6399fb80f718bfa6185e5dc2776f97050afe86ade2
ep_bytes: 60909090909067e80000000090909090
timestamp: 2023-07-29 18:29:59

Version Info:

0: [No Data]

TrojanDownloader:Win32/Berbew!pz also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGenPack:Backdoor.Hangup.B
ClamAVWin.Trojan.Crypted-36
FireEyeGeneric.mg.698b36c1cf1a2aee
SkyhighBehavesLike.Win32.Generic.qh
McAfeeTrojan-FVOK!698B36C1CF1A
Cylanceunsafe
VIPREGenPack:Backdoor.Hangup.B
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.5eb739
BaiduWin32.Trojan-Spy.Quart.a
VirITWorm.Win32.Berbew.G
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Spy.Qukart
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.Qukart.af
BitDefenderGenPack:Backdoor.Hangup.B
NANO-AntivirusTrojan.Win32.Qukart.jvmjtu
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Pornoasset.a
EmsisoftGenPack:Backdoor.Hangup.B (B)
F-SecureTrojan.TR/Spy.Qukart.NB
DrWebBackDoor.HangUp.43832
ZillyaTrojan.QukartGen.Win32.2
Trapminemalicious.high.ml.score
SophosMal/Padodor-A
IkarusTrojan.Crypt
GDataGenPack:Backdoor.Hangup.B
JiangminTrojanSpy.Qukart.admc
GoogleDetected
AviraTR/Spy.Qukart.NB
MAXmalware (ai score=88)
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
ArcabitGenPack:Backdoor.Hangup.B
ZoneAlarmTrojan-Spy.Win32.Qukart.af
MicrosoftTrojanDownloader:Win32/Berbew!pz
VaristW32/Qukart.K.gen!Eldorado
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.6CDB3E0D1E
ALYacGenPack:Backdoor.Hangup.B
TACHYONBackdoor/W32.Padodor
VBA32BScope.Backdoor.Berbew
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingBackdoor.Berbew!1.AE0A (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove TrojanDownloader:Win32/Berbew!pz?

TrojanDownloader:Win32/Berbew!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment