MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-23 07:17:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #94 from Delta-Sierra/master

Browse source 
add lukitus extension to Locky
This commit is contained in:
Alexandre Dulaunoy 2017-10-06 20:31:11 +02:00 committed by GitHub
commit 7e962b9a68
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
clusters/ransomware.json
View file

@ -6482,7 +6482,8 @@
"([A-F0-9]{32}).thor", "([A-F0-9]{32}).thor",
"([A-F0-9]{32}).aesir", "([A-F0-9]{32}).aesir",
"([A-F0-9]{32}).zzzzz", "([A-F0-9]{32}).zzzzz",
"([A-F0-9]{32}).osiris" "([A-F0-9]{32}).osiris",
".lukitus"
], ],
"encryption": "AES-128", "encryption": "AES-128",
"ransomnotes": [ "ransomnotes": [
@ -6494,7 +6495,9 @@
"_WHAT_is.html", "_WHAT_is.html",
"_INSTRUCTION.html", "_INSTRUCTION.html",
"DesktopOSIRIS.(bmp|htm)", "DesktopOSIRIS.(bmp|htm)",
"OSIRIS-[0-9]{4}.htm" "OSIRIS-[0-9]{4}.htm",
"lukitus.htm",
"lukitus.bmp."
], ],
"refs": [ "refs": [
"http://www.bleepingcomputer.com/news/security/new-locky-version-adds-the-zepto-extension-to-encrypted-files/", "http://www.bleepingcomputer.com/news/security/new-locky-version-adds-the-zepto-extension-to-encrypted-files/",