Skip to main content

Berbew

Malware Family

154 indicators of compromise attributed to Berbew across abuse.ch threat intelligence feeds.

Domains

0

IPs

0

URLs

30

Hashes

124

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
http://parex-bank.ru/index.htmurl
http://color-bank.ru/index.phpurl
http://virus-list.com/index.phpurl
http://ros-neftbank.ru/index.phpurl
http://master-x.com/index.phpurl
https://zadelom.ru/auth/authurl
http://fethard.biz/index.htmurl
http://kavkaz.ru/index.htmurl
http://konfiskat.org/index.htmurl
http://xware.cjb.net/index.htmurl
http://crutop.ru/index.htmurl
http://kadet.ru/index.htmurl
http://promo.ru/index.htmurl
http://potleaf.chat.ru/index.htmurl
http://ldark.nm.ru/index.htmurl
http://cvv.ru/index.phpurl
http://www.redline.ru/index.phpurl
http://devx.nm.ru/index.phpurl
http://trojan.ru/index.phpurl
http://crutop.ru/index.phpurl
3953a675ba8ca1bda87df3d751ff5d7013a94f8f4c9cdb140d26833fa39d23a2hash
38672563bb7cb452e4b66ae246f99ca20bc64736a204642760c78e6a9a799d71hash
362df35906c51bcf799b7afe4f85dcf721a286a9a68c38862eefa2cdb403ba7chash
06192a6eed800e6ca168ed4cf259aa45b891a3d95f31be030a943a96c7d5a2f9hash
5601eb09023210296350c4c312ddab59018e974c372f3944af3175147874a762hash
416d6b2a45db9a8798f468a4f578aea1af8c6cfbbf6837b719d2443065b12a54hash
f288e9c3f1ebbbbf5aae4a1eeefd004261c8147051904a46f4407a0c370fd618hash
6eec2ad6647ca277576cd2ec606bb948a70fad1f9da1f75cc106b039d92c5fb9hash
89adf30332271727c270458e062204ded7a1e192ea6c2a23e0549c2974a4ca82hash
0bfd26288e3ac10b73349743bdba9758b4ce36b075b4e9c4252d4610a891a2ebhash
2d1ebb33f1140a16037e8cb3f6f490496a742bbbd36d7405af097d3a4c8e7c5bhash
18a6a61e1d4d34994aa98f536339bfc98ad61a0635d22b6841296a683368db33hash
00003647411b5cc8cc88f76738d39e0c2ac263b1bdbcfc37fbfb5e352b0b3970hash
0a838fe17665b046dc6b5765a7ff56a21a562d2bc9cede2dce4530a985a0afe3hash
40905703a735c2fdd68c8d85f7344c15fcdb357a718b516df2ff362a6d0dc1c9hash
3c919b6dab873a33ce06cdfe459ce7745d42aea3641ec19acae1e0bacc854860hash
2b836a69abc38cfca0cca8b20213ffcc84037229e3325edbc80603bc9fc163a9hash
b5bc198fb2a8b60bc89da31776fe8e1285bd425e0c9f7d7fa6bad60f7451be60hash
ffe53e36304bc25aa703cae5c4930d809031e5aa84fd6b4e4179932f82ae38f8hash
ed68cac3fdb8d46c8b5f7cba7d5eacec5c0045aafebe4bc874fdb71cfe1edffehash

Another file to check? Run a file hash reputation check.