MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-30 02:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

chg: [rels] more threat actor relations

Browse source
This commit is contained in:
Christophe Vandeplas 2023-04-23 17:54:58 +02:00
parent 3c6c204f01
commit 79b80b0869
No known key found for this signature in database
GPG key ID: BDC48619FFDC5A5B
3 changed files with 281 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
clusters/360net.json
View file

@ -76,6 +76,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "37808cab-cbb3-560b-bebd-375fa328ea1e",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "ad1a6df6-2251-5e47-a245-8693c1ace8fb", "uuid": "ad1a6df6-2251-5e47-a245-8693c1ace8fb",
@ -484,6 +491,20 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "b56af6ab-69f8-457a-bf50-c3aefa6dc14a",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
},
{
"dest-uuid": "0a4ddab3-a1a6-5372-b11f-5edc25c0e548",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "f52ab8b8-71f2-5a88-946f-853dc3441efe", "uuid": "f52ab8b8-71f2-5a88-946f-853dc3441efe",
@ -531,6 +552,20 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "213cdde9-c11a-4ea9-8ce0-c868e9826fec",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
},
{
"dest-uuid": "8d84d7b0-7716-5ab3-a3a4-f373dd148347",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "3d9f700c-5eb5-5d36-a6e7-47b55f2844cd", "uuid": "3d9f700c-5eb5-5d36-a6e7-47b55f2844cd",
@ -566,6 +601,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "473eb51c-36cb-5e3a-8347-2f57df809be9",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "0fdab65b-3e2b-5fd8-be36-cc18c7bcc1d7", "uuid": "0fdab65b-3e2b-5fd8-be36-cc18c7bcc1d7",
@ -1177,5 +1219,5 @@
"value": "WellMess - APT-C-42" "value": "WellMess - APT-C-42"
} }
], ],
"version": 5 "version": 6
} }

146
clusters/microsoft-activity-group.json
View file

@ -118,6 +118,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "3d9f700c-5eb5-5d36-a6e7-47b55f2844cd",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "213cdde9-c11a-4ea9-8ce0-c868e9826fec", "uuid": "213cdde9-c11a-4ea9-8ce0-c868e9826fec",
@ -143,6 +150,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "f52ab8b8-71f2-5a88-946f-853dc3441efe",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "b56af6ab-69f8-457a-bf50-c3aefa6dc14a", "uuid": "b56af6ab-69f8-457a-bf50-c3aefa6dc14a",
@ -414,6 +428,15 @@
"Gamaredon" "Gamaredon"
] ]
}, },
"related": [
{
"dest-uuid": "1a77e156-76bc-43f5-bdd7-bd67f30fbbbb",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "fc77a775-d06f-5efc-a6fa-0b2af01902a7", "uuid": "fc77a775-d06f-5efc-a6fa-0b2af01902a7",
"value": "Aqua Blizzard" "value": "Aqua Blizzard"
}, },
@ -508,6 +531,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "ad1a6df6-2251-5e47-a245-8693c1ace8fb",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "37808cab-cbb3-560b-bebd-375fa328ea1e", "uuid": "37808cab-cbb3-560b-bebd-375fa328ea1e",
@ -553,6 +583,15 @@
"ControlX" "ControlX"
] ]
}, },
"related": [
{
"dest-uuid": "39150b30-61af-4d9c-9682-1595e145f3c1",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "3f8b7c98-7484-523f-9d58-181274e6fc8f", "uuid": "3f8b7c98-7484-523f-9d58-181274e6fc8f",
"value": "Charcoal Typhoon" "value": "Charcoal Typhoon"
}, },
@ -667,6 +706,15 @@
"Lazarus" "Lazarus"
] ]
}, },
"related": [
{
"dest-uuid": "68391641-859f-4a9a-9a1e-3e5cf71ec376",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "9630b0aa-ee9e-5b58-9f79-cf7fa8d291a8", "uuid": "9630b0aa-ee9e-5b58-9f79-cf7fa8d291a8",
"value": "Diamond Sleet" "value": "Diamond Sleet"
}, },
@ -715,6 +763,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "3d9f700c-5eb5-5d36-a6e7-47b55f2844cd",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "8d84d7b0-7716-5ab3-a3a4-f373dd148347", "uuid": "8d84d7b0-7716-5ab3-a3a4-f373dd148347",
@ -830,6 +885,20 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "86724806-7ec9-4a48-a0a7-ecbde3bf4810",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
},
{
"dest-uuid": "a0082cfa-32e2-42b8-92d8-5c7a7409dcf1",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "b6260d6d-a2f7-5b79-8132-5c456a225f53", "uuid": "b6260d6d-a2f7-5b79-8132-5c456a225f53",
@ -994,6 +1063,15 @@
"Moses Staff" "Moses Staff"
] ]
}, },
"related": [
{
"dest-uuid": "d45dd940-b38d-4b2c-9f2f-3e4a0eac841c",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "ef415059-e150-5324-877e-44b65ab022f5", "uuid": "ef415059-e150-5324-877e-44b65ab022f5",
"value": "Marigold Sandstorm" "value": "Marigold Sandstorm"
}, },
@ -1017,6 +1095,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "2ee5ed7a-c4d0-40be-a837-20817474a15b",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "31982812-c8bf-5e85-b0ba-0c64a7d05d20", "uuid": "31982812-c8bf-5e85-b0ba-0c64a7d05d20",
@ -1259,6 +1344,15 @@
"FIN12" "FIN12"
] ]
}, },
"related": [
{
"dest-uuid": "bdf4fe4f-af8a-495f-a719-cf175cecda1f",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "567ea386-a78f-5550-ae7c-9c9eacdf45af", "uuid": "567ea386-a78f-5550-ae7c-9c9eacdf45af",
"value": "Pistachio Tempest" "value": "Pistachio Tempest"
}, },
@ -1376,6 +1470,15 @@
"BlueNoroff" "BlueNoroff"
] ]
}, },
"related": [
{
"dest-uuid": "68391641-859f-4a9a-9a1e-3e5cf71ec376",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "3a32c54d-d86a-55de-b16a-d9a08a5cf49b", "uuid": "3a32c54d-d86a-55de-b16a-d9a08a5cf49b",
"value": "Sapphire Sleet" "value": "Sapphire Sleet"
}, },
@ -1405,6 +1508,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "0fdab65b-3e2b-5fd8-be36-cc18c7bcc1d7",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "473eb51c-36cb-5e3a-8347-2f57df809be9", "uuid": "473eb51c-36cb-5e3a-8347-2f57df809be9",
@ -1532,6 +1642,15 @@
"UNC1151" "UNC1151"
] ]
}, },
"related": [
{
"dest-uuid": "749aaa11-f0fd-416b-bf6c-112f9b5930a5",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "60ac9e2c-b3b2-5c6b-913e-935952e14c28", "uuid": "60ac9e2c-b3b2-5c6b-913e-935952e14c28",
"value": "Storm-0257" "value": "Storm-0257"
}, },
@ -1561,6 +1680,15 @@
"LAPSUS$" "LAPSUS$"
] ]
}, },
"related": [
{
"dest-uuid": "d9e5be22-1a04-4956-af6c-37af02330980",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "d4dfb329-822c-5db3-a078-a8c0f77924da", "uuid": "d4dfb329-822c-5db3-a078-a8c0f77924da",
"value": "Strawberry Tempest" "value": "Strawberry Tempest"
}, },
@ -1692,9 +1820,25 @@
"Tapaoux" "Tapaoux"
] ]
}, },
"related": [
{
"dest-uuid": "f52ab8b8-71f2-5a88-946f-853dc3441efe",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
},
{
"dest-uuid": "b8c8b96d-61e6-47b1-8e38-fd8ad5d9854d",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "0a4ddab3-a1a6-5372-b11f-5edc25c0e548", "uuid": "0a4ddab3-a1a6-5372-b11f-5edc25c0e548",
"value": "Zigzag Hail" "value": "Zigzag Hail"
} }
], ],
"version": 18 "version": 20
} }

94
clusters/threat-actor.json
View file

@ -355,6 +355,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "0a4ddab3-a1a6-5372-b11f-5edc25c0e548",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "b8c8b96d-61e6-47b1-8e38-fd8ad5d9854d", "uuid": "b8c8b96d-61e6-47b1-8e38-fd8ad5d9854d",
@ -2108,6 +2115,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "b6260d6d-a2f7-5b79-8132-5c456a225f53",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "86724806-7ec9-4a48-a0a7-ecbde3bf4810", "uuid": "86724806-7ec9-4a48-a0a7-ecbde3bf4810",
@ -3069,6 +3083,20 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "9630b0aa-ee9e-5b58-9f79-cf7fa8d291a8",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
},
{
"dest-uuid": "3a32c54d-d86a-55de-b16a-d9a08a5cf49b",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "68391641-859f-4a9a-9a1e-3e5cf71ec376", "uuid": "68391641-859f-4a9a-9a1e-3e5cf71ec376",
@ -4287,6 +4315,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "fc77a775-d06f-5efc-a6fa-0b2af01902a7",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "1a77e156-76bc-43f5-bdd7-bd67f30fbbbb", "uuid": "1a77e156-76bc-43f5-bdd7-bd67f30fbbbb",
@ -6096,6 +6131,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "b6260d6d-a2f7-5b79-8132-5c456a225f53",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "a0082cfa-32e2-42b8-92d8-5c7a7409dcf1", "uuid": "a0082cfa-32e2-42b8-92d8-5c7a7409dcf1",
@ -6890,6 +6932,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "similar" "type": "similar"
},
{
"dest-uuid": "567ea386-a78f-5550-ae7c-9c9eacdf45af",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "bdf4fe4f-af8a-495f-a719-cf175cecda1f", "uuid": "bdf4fe4f-af8a-495f-a719-cf175cecda1f",
@ -8637,6 +8686,13 @@
"estimative-language:likelihood-probability=\"likely\"" "estimative-language:likelihood-probability=\"likely\""
], ],
"type": "uses" "type": "uses"
},
{
"dest-uuid": "31982812-c8bf-5e85-b0ba-0c64a7d05d20",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
} }
], ],
"uuid": "2ee5ed7a-c4d0-40be-a837-20817474a15b", "uuid": "2ee5ed7a-c4d0-40be-a837-20817474a15b",
@ -8763,6 +8819,15 @@
"PUSHCHA" "PUSHCHA"
] ]
}, },
"related": [
{
"dest-uuid": "60ac9e2c-b3b2-5c6b-913e-935952e14c28",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "749aaa11-f0fd-416b-bf6c-112f9b5930a5", "uuid": "749aaa11-f0fd-416b-bf6c-112f9b5930a5",
"value": "Ghostwriter" "value": "Ghostwriter"
}, },
@ -9350,6 +9415,15 @@
"Moses Staff" "Moses Staff"
] ]
}, },
"related": [
{
"dest-uuid": "ef415059-e150-5324-877e-44b65ab022f5",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "d45dd940-b38d-4b2c-9f2f-3e4a0eac841c", "uuid": "d45dd940-b38d-4b2c-9f2f-3e4a0eac841c",
"value": "MosesStaff" "value": "MosesStaff"
}, },
@ -9399,6 +9473,15 @@
"SLIPPY SPIDER" "SLIPPY SPIDER"
] ]
}, },
"related": [
{
"dest-uuid": "d4dfb329-822c-5db3-a078-a8c0f77924da",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "d9e5be22-1a04-4956-af6c-37af02330980", "uuid": "d9e5be22-1a04-4956-af6c-37af02330980",
"value": "LAPSUS" "value": "LAPSUS"
}, },
@ -9868,6 +9951,15 @@
"Red Dev 10" "Red Dev 10"
] ]
}, },
"related": [
{
"dest-uuid": "3f8b7c98-7484-523f-9d58-181274e6fc8f",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "39150b30-61af-4d9c-9682-1595e145f3c1", "uuid": "39150b30-61af-4d9c-9682-1595e145f3c1",
"value": "Earth Lusca" "value": "Earth Lusca"
}, },
@ -11169,5 +11261,5 @@
"value": "Anonymous Sudan" "value": "Anonymous Sudan"
} }
], ],
"version": 270 "version": 271
} }