Skip to main content

Berbew

Malware Family

154 indicators of compromise attributed to Berbew across abuse.ch threat intelligence feeds.

Domains

0

IPs

0

URLs

30

Hashes

124

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
http://kidos-bank.ru/index.htmurl
http://kaspersky.ru/index.htmurl
http://parex-bank.ru/index.htmurl
http://gaz-prom.ru/index.htmurl
http://ros-neftbank.ru/index.phpurl
http://master-x.com/index.phpurl
https://zadelom.ru/auth/authurl
http://kavkaz.ru/index.htmurl
http://crutop.ru/index.htmurl
http://cvv.ru/index.htmurl
http://crutop.nu/index.htmurl
http://kadet.ru/index.htmurl
http://promo.ru/index.htmurl
http://potleaf.chat.ru/index.htmurl
http://ldark.nm.ru/index.htmurl
http://cvv.ru/index.phpurl
http://devx.nm.ru/index.phpurl
http://trojan.ru/index.phpurl
http://crutop.ru/index.phpurl
http://crutop.nu/index.phpurl
5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4hash
3953a675ba8ca1bda87df3d751ff5d7013a94f8f4c9cdb140d26833fa39d23a2hash
38672563bb7cb452e4b66ae246f99ca20bc64736a204642760c78e6a9a799d71hash
2828d39164b95650b137860a035ca338a7cd6645dd4caf5a68cc42dac31355aehash
06192a6eed800e6ca168ed4cf259aa45b891a3d95f31be030a943a96c7d5a2f9hash
f06b863f0be9c9f925627f92eceae12c73000ec254b5bcc7c56b913845b30a0fhash
31a7154c81e97cf53c59934f4af6ed1c87d3f0fb5f98aeec6c0da4efc3a859eahash
9690762cb106ae66e3318eff75d1b40fe5699408d02f6a97d6679fc554cbab52hash
1b825081afb73860c0dd018d14788183ea23907f8a2e43eb26a25431b1167fbehash
0c3642c76401c11eae68361a8b5e92cf1810e82bce89eedee3aa8898b9b79e17hash
06874f91f3b93d937f680f71dfe3de140b93cf5e1309f6f4bcb46b82ff0ac62dhash
5a2ea52f812a17e0376c7c5236b44992c55d55257a97b1af99a0909094db39a0hash
06ef6e2ffa0fdffb2ea1087200d5e283c94d06e98877543a3f45e30f0b02c933hash
40905703a735c2fdd68c8d85f7344c15fcdb357a718b516df2ff362a6d0dc1c9hash
aaa87e001ad26d24cc977adb90d0c6224a31a147689903cb66f8b8ac9c857003hash
409e0130211b0b0eccf32859b4678295f3b658ce5b34efac06b42a2cd1da5687hash
64c2beaf64cf0e2865130f2a820ebb07c7dc163b2ad9a5e97f4f61a320e830e9hash
7071f246b6a05498d687968291b230d426accc3a096e21dd3faf50511d036309hash
ffe53e36304bc25aa703cae5c4930d809031e5aa84fd6b4e4179932f82ae38f8hash
ed68cac3fdb8d46c8b5f7cba7d5eacec5c0045aafebe4bc874fdb71cfe1edffehash

Another file to check? Run a file hash reputation check.