MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Create a tool for Esile

Browse source
This commit is contained in:
Mathieu Beligon 2022-08-17 11:19:30 -07:00
parent 9c6f106928
commit 3f50cf0175
2 changed files with 23 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
clusters/threat-actor.json
View file

@ -890,7 +890,6 @@
"synonyms": [ "synonyms": [
"Spring Dragon", "Spring Dragon",
"ST Group", "ST Group",
"Esile",
"DRAGONFISH", "DRAGONFISH",
"BRONZE ELGIN", "BRONZE ELGIN",
"ATK1", "ATK1",

23
clusters/tool.json
View file

@ -8484,6 +8484,29 @@
}, },
"uuid": "f43a3828-a3b6-11ec-80e1-55a8e5815c2c", "uuid": "f43a3828-a3b6-11ec-80e1-55a8e5815c2c",
"value": "BadPotato" "value": "BadPotato"
},
{
"description": "The Esile campaign was named after certain strings found in the unpacked malware file that it sends out. All of the malware related to this campaign are detected as BKDR_ESILE variants.",
"meta": {
"refs": [
"https://www.trendmicro.com/vinfo/de/security/news/cyber-attacks/esile-targeted-attack-campaign-hits-apac-governments",
"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/esile"
],
"synonyms": [
"BKDR_ESILE"
]
},
"related": [
{
"dest-uuid": "32fafa69-fe3c-49db-afd4-aac2664bcf0d",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "used-by"
}
],
"uuid": "7d34ca56-ce69-465f-b8c8-ffd02c4b619d",
"value": "Esile"
} }
], ],
"version": 150 "version": 150