Neo_Net | The Kingpin of Spanish eCrime
Tags
cmtmf-attack-pattern: Application Layer Protocol Obfuscated Files Or Information
country: Australia Austria Venezuela Chile Colombia Netherlands Ecuador Germany France Greece Spain Mexico Panama Peru Poland United Kingdom
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Model Application Layer Protocol - T1437 Asymmetric Cryptography - T1521.002 Asymmetric Cryptography - T1573.002 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Encrypted Channel - T1521 Encrypted Channel - T1573 Exfiltration Over C2 Channel - T1646 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Obfuscated Files Or Information - T1406 System Information Discovery - T1426 Multi-Factor Authentication - T1556.006 One-Way Communication - T1102.003 One-Way Communication - T1481.003 Phishing - T1660 Phishing - T1566 Protected User Data - T1636 Sms Messages - T1636.004 Software - T1592.002 Software Packing - T1027.002 Software Packing - T1406.002 System Checks - T1633.001 System Checks - T1497.001 Web Protocols - T1071.001 Web Protocols - T1437.001 Web Service - T1481 Virtualization/Sandbox Evasion - T1497 Virtualization/Sandbox Evasion - T1633 Standard Application Layer Protocol - T1071 Exfiltration Over Command And Control Channel - T1041 Obfuscated Files Or Information - T1027 Software Packing - T1045 System Information Discovery - T1082 Web Service - T1102
Show in Graph
Common Information
Type Value
UUID ba03f2a4-970e-4ef1-8a36-b46486691c04
Fingerprint b04e80119a03a4c9
Analysis status DONE
Considered CTI value 2
Text language
Published July 3, 2023, midnight
Added to db July 5, 2023, 12:20 a.m.
Last updated Nov. 7, 2024, 2:09 a.m.
Headline Neo_Net | The Kingpin of Spanish eCrime
Title Neo_Net | The Kingpin of Spanish eCrime
Detected Hints/Tags/Attributes 93/4/54
Source URLs
Redirection Url
Details Source https://www.sentinelone.com/blog/neo_net-the-kingpin-of-spanish-ecrime/
URL Provider
Details Provider Source level domain
Details sentinelone.com www.sentinelone.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 234 ✔ SentinelOne https://sentinelone.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
macosfera.com
Details Domain 2 
ankarex.net
Details Domain 1 
com.neonet.app
Details Domain 2 
bbva.info-cliente.net
Details Domain 2 
santander.esentregas.ga
Details Domain 2 
bbva.esentregas.ga
Details Domain 2 
correos.esentregas.ga
Details File 2 
bbva.inf
Details sha1 2 
de8929c1a0273d0ed0dc3fc55058e0cb19486b3c
Details sha1 2 
b344fe1bbb477713016d41d996c0772a308a5146
Details sha1 2 
8a099af61f1fa692f45538750d42aab640167fd2
Details sha1 2 
ab14161e243d478dac7a83086ed4839f8ad7ded8
Details sha1 2 
ded2655512de7d3468f63f9487e16a0bd17818ff
Details sha1 2 
a5208de82def52b4019a6d3a8da9e14a13bc2c43
Details sha1 2 
21112c1955d131fa6cab617a3d7265acfab783c2
Details sha1 2 
6ea53a65fe3a1551988c6134db808e622787e7f9
Details sha1 2 
62236a501e11d5fbfe411d841caf5f2253c150b8
Details sha1 2 
7f0c3fdbfcdfc24c2da8aa3c52aa13f9b9cdda84
Details sha1 2 
f918a6ecba56df298ae635a6a0f008607b0420b9
Details sha1 2 
ffbcdf915916595b96f627df410722cee5b83f13
Details sha1 2 
7b4ab7b2ead7e004c0d93fe916af39c156e0bc61
Details sha1 2 
34d0faea99d94d3923d0b9e36ef9e0c48158e7a0
Details sha1 2 
e6c485551d4f209a0b7b1fa9aa78b7efb51be49b
Details sha1 2 
1df3ed2e2957efbd1d87aac0c25a3577318b8e2a
Details sha1 2 
6a907b8e5580a5067d9fb47ef21826f164f68f3f
Details sha1 2 
5d1c7ff3d16ec770cf23a4d82a91358b9142d21a
Details sha1 2 
86ad0123fa20b7c0efb6fe8afaa6a756a86c9836
Details sha1 2 
14a36f18a45348ad9efe43b20d049f3345735163
Details sha1 2 
b506503bb71f411bb34ec8124ed26ae27a4834b9
Details sha1 2 
afe84fa17373ec187781f72c330dfb7bb3a42483
Details sha1 2 
445468cd5c298f0393f19b92b802cfa0f76c32d4
Details sha1 2 
8491ff15ad27b90786585b06f81a3938d5a61b39
Details sha1 2 
2714e0744ad788142990696f856c5ffbc7173cf4
Details sha1 2 
1ce0afe5e09b14f8aee6715a768329660e95121e
Details sha1 2 
96a3600055c63576be9f7dc97c5b25f1272edd2b
Details sha1 2 
9954ae7d31ea65cd6b8cbdb396e7b99b0cf833f4
Details sha1 2 
07159f46a8adde95f541a123f2dda6c49035aad1
Details sha1 2 
ab19a95ef3adcb83be76b95eb7e7c557812ad2f4
Details sha1 2 
db8eeab4ab2e2e74a34c47ad297039485ff75f22
Details sha1 2 
dbf0cec18caabeb11387f7e6d14df54c808e441d
Details sha1 2 
69d38eed5dc89a7b54036cc7dcf7b96fd000eb92
Details sha1 2 
c38107addc00e2a2f5dcb6ea0cbce40400c23b49
Details sha1 2 
279048e07c25fd75c4cef7c64d1ae741e178b35b
Details sha1 2 
ef8c5d639390d9ba138ad9c2057524ff6e1398de
Details sha1 2 
e7c2d0c80125909d85913dfb941bdc373d677326
Details sha1 2 
145bd67f94698cc5611484f46505b3dc825bd6cd
Details MITRE ATT&CK Techniques 15 
T1406.002
Details MITRE ATT&CK Techniques 6 
T1633.001
Details MITRE ATT&CK Techniques 25 
T1426
Details MITRE ATT&CK Techniques 17 
T1636.004
Details MITRE ATT&CK Techniques 17 
T1437.001
Details MITRE ATT&CK Techniques 2 
T1481.003
Details MITRE ATT&CK Techniques 2 
T1521.002
Details MITRE ATT&CK Techniques 16 
T1646