Necurs

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Necurs
Alias
Group	Downloading, Spamming
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector
UserAgent
CCProtocol
Activity	/
Status
Language
Programming language
Operation/Working group

Introduction

Anti-virus blocking (Agnitum, ALWIL, Avira, Beijing Jiangmin, Beijing Rising, BitDefender, BullGuard, Check Point Software Technologies, CJSC Returnil, Comodo Security Solutions, Doctor Web, ESET, FRISK, G DATA, GRISOFT, Immunet, K7 Computing, Kaspersky Lab, Microsoft, NovaShield, Panda, PC Tools, Quick Heal Technologies, Sunbelt, Symantec, VirusBuster)

Features

• File download

• Send spam

• Backdoor

• Debugging

• Anti-virus blocking

Publications

	Author	Editor	Year
Cerber Dominates Ransomware Landscape After Locky's Demise	Catalin Cimpanu	Bleeping Computer	2017
Necurs Quick Analysis	RootBSD	Malware.lu	2012
Unexpected reboot: Necurs	Tim Liu	Microsoft	2012