MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-30 10:47:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #121 from Delta-Sierra/master

Browse source 
add Ordinypt
This commit is contained in:
Alexandre Dulaunoy 2017-11-21 12:17:47 +01:00 committed by GitHub
commit 546bc7f050
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
clusters/tool.json
View file

@ -10,7 +10,7 @@
], ],
"description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.", "description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",
"uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f", "uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f",
"version": 37, "version": 38,
"values": [ "values": [
{ {
"meta": { "meta": {
@ -3071,6 +3071,18 @@
"https://www.agenttesla.com/" "https://www.agenttesla.com/"
] ]
} }
},
{
"value": "Ordinypt",
"description": "A new ransomware strain called Ordinypt is currently targeting victims in Germany, but instead of encrypting users' documents, the ransomware rewrites files with random data. Ordinypt is actually a wiper and not ransomware because it does not bother encrypting anything, but just replaces files with random data.",
"meta": {
"refs": [
"https://www.bleepingcomputer.com/news/security/ordinypt-ransomware-intentionally-destroys-files-currently-targeting-germany/"
],
"synonyms": [
"HSDFSDCrypt"
]
}
} }
] ]
} }