Monitoring Necurs - The tip of the iceberg
Tags
country: India
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID b13eb254-6a0f-4af4-b356-b8d05c67e1e7
Fingerprint 8f0da77408338c83
Analysis status DONE
Considered CTI value 0
Text language
Published May 31, 2016, midnight
Added to db Jan. 18, 2023, 10:49 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Monitoring Necurs - The tip of the iceberg
Title Monitoring Necurs - The tip of the iceberg
Detected Hints/Tags/Attributes 46/2/12
Source URLs
Redirection Url
Details Source https://www.bitsighttech.com/blog/monitoring-necurs-the-tip-of-the-iceberg
URL Provider
Details Provider Source level domain
Details bitsighttech.com www.bitsighttech.com
Attributes
Details Type #Events CTI Value
Details Domain 247 
www.virusbulletin.com
Details Domain 5 
www.johannesbader.ch
Details Domain 21 
www.malwaretech.com
Details Domain 397 
www.microsoft.com
Details File 2 
necursp2p-hybrid-peer-to-peer-necurs.html
Details File 18 
entry.aspx
Details Url 2 
https://www.virusbulletin.com/virusbulletin/2014/04/curse-necurs-part-1
Details Url 2 
https://www.virusbulletin.com/virusbulletin/2014/05/curse-necurs-part-2
Details Url 2 
https://www.virusbulletin.com/virusbulletin/2014/06/curse-necurs-part-3
Details Url 2 
https://www.johannesbader.ch/2015/02/the-dgas-of-necurs
Details Url 2 
http://www.malwaretech.com/2016/02/necursp2p-hybrid-peer-to-peer-necurs.html
Details Url 2 
https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=trojan:win32