MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-27 01:07:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #71 from Delta-Sierra/master

Browse source 
Add SOREBRECT ransomware
This commit is contained in:
Alexandre Dulaunoy 2017-06-21 09:10:41 +02:00 committed by GitHub
commit 3101af70f9
1 changed files with 16 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
clusters/ransomware.json
View file

@ -8474,12 +8474,27 @@
], ],
"encryption": "may be a mixture of AES and RC4.", "encryption": "may be a mixture of AES and RC4.",
"ransomnotes": [ "ransomnotes": [
"_DECODE_FILES.txt" "DECODE_FILES.txt"
], ],
"refs": [ "refs": [
"https://www.bleepingcomputer.com/news/security/uiwix-ransomware-using-eternalblue-smb-exploit-to-infect-victims/" "https://www.bleepingcomputer.com/news/security/uiwix-ransomware-using-eternalblue-smb-exploit-to-infect-victims/"
] ]
} }
},
{
"value": "SOREBRECT",
"description": "Fileless, Code-injecting Ransomware",
"meta": {
"extensions": [
".pr0tect"
],
"ransomnotes": [
"http://blog.trendmicro.com/trendlabs-security-intelligence/files/2017/06/SOREBRECT-3.jpg"
],
"refs": [
"http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-fileless-code-injecting-sorebrect-ransomware/"
]
}
} }
], ],
"source": "Various", "source": "Various",