MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-27 01:07:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add Uiwik ransomware

Browse source
This commit is contained in:
Deborah Servili 2017-05-18 13:59:47 +02:00
parent 3b93a773e5
commit 7fee4f3a1b
1 changed files with 17 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
clusters/ransomware.json
View file

@ -1239,7 +1239,7 @@
"IMPORTANTE_LEER.html", "IMPORTANTE_LEER.html",
"RECUPERAR_ARCHIVOS.html", "RECUPERAR_ARCHIVOS.html",
"https://3.bp.blogspot.com/-KE6dziEK4To/WHnvPzKOs7I/AAAAAAAADHI/KPBjmO9iChgAa12-f1VOxF49Pv27-0XfQCLcB/s1600/note.jpg" "https://3.bp.blogspot.com/-KE6dziEK4To/WHnvPzKOs7I/AAAAAAAADHI/KPBjmO9iChgAa12-f1VOxF49Pv27-0XfQCLcB/s1600/note.jpg"
], ],Yamuraiha
"encryption": "AES", "encryption": "AES",
"extensions": [ "extensions": [
".locked" ".locked"
@ -8465,6 +8465,22 @@
] ]
} }
} }
{
"value": "Uiwix Ransomware",
"description": "Using EternalBlue SMB Exploit To Infect Victims",
"meta": {
"extensions": [
"._[10_digit_victim_id].UIWIX"
],
"encryption": "may be a mixture of AES and RC4.",
"ransomnotes": [
"_DECODE_FILES.txt"
],
"refs": [
"https://www.bleepingcomputer.com/news/security/uiwix-ransomware-using-eternalblue-smb-exploit-to-infect-victims/"
]
}
}
], ],
"source": "Various", "source": "Various",
"uuid": "10cf658b-5d32-4c4b-bb32-61760a640372", "uuid": "10cf658b-5d32-4c4b-bb32-61760a640372",