Necurs Evades Detection via Internet Shortcut File
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Javascript - T1059.007 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Screen Capture - T1513 Server - T1583.004 Server - T1584.004 Visual Basic - T1059.005 Screen Capture - T1113 Screen Capture
Show in Graph
Common Information
Type Value
UUID 80266ca3-b133-413c-987a-ebdea710b7fe
Fingerprint 1465ac5839be8acd
Analysis status DONE
Considered CTI value 2
Text language
Published April 26, 2018, midnight
Added to db Oct. 15, 2024, 5:13 p.m.
Last updated Oct. 15, 2024, 5:14 p.m.
Headline Necurs Evades Detection via Internet Shortcut File
Title Necurs Evades Detection via Internet Shortcut File
Detected Hints/Tags/Attributes 46/3/4
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/18/d/necurs-evolves-to-evade-spam-detection-via-internet-shortcut-file.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details sha256 1 
03c770882e87585fea0272a8e6a7b7e37085e193475884b1316e14fb193e992d
Details sha256 1 
b0c173e0fc28e0f1bc8debfe49de01f306d372a0516d88201b87e441f3de303e
Details sha256 1 
b87e0dd9b0e032c6d2d5f0bf46f00243a2a866bf1d3d22f8b72737b4aa1148eb
Details sha256 1 
00ca7e9e61a3ceaa4b9250866aface8af63e5ae71435d4fd6c770a8c9a167f22