Overview

overview

10

Static

static

10

23c0317d8b...0N.exe

windows7-x64

10

23c0317d8b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23c0317d8b5f81f4a589aac031b36d1181b69fc149d3b40164f2206743adfae0N

  • Size

    115KB

  • MD5

    e48b4d9d361aab3f3f91f095e81e9ff0

  • SHA1

    8884a64a750d56b5ddac4de240bee6f2cb9ae159

  • SHA256

    23c0317d8b5f81f4a589aac031b36d1181b69fc149d3b40164f2206743adfae0

  • SHA512

    a428ad5b938d007183952a416bddd01df73ac68936458e9ea7a13bef2d58c20602fa7791004033b51b4bc6c73e9f2af3acd079d287183fd8da518bac5c63719a

  • SSDEEP

    3072:FZ6HMuY+j6WdbrIR/SoQUP5u30KqTKr4:r6HPj6WhrIooQUPoDqTKE

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://crutop.nu/index.php

http://crutop.ru/index.php

http://mazafaka.ru/index.php

http://color-bank.ru/index.php

http://asechka.ru/index.php

http://trojan.ru/index.php

http://fuck.ru/index.php

http://goldensand.ru/index.php

http://filesearch.ru/index.php

http://devx.nm.ru/index.php

http://ros-neftbank.ru/index.php

http://lovingod.host.sk/index.php

http://www.redline.ru/index.php

http://cvv.ru/index.php

http://hackers.lv/index.php

http://fethard.biz/index.php

http://ldark.nm.ru/index.htm

http://gaz-prom.ru/index.htm

http://promo.ru/index.htm

http://potleaf.chat.ru/index.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23c0317d8b5f81f4a589aac031b36d1181b69fc149d3b40164f2206743adfae0N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.