MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-23 07:17:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #480 from rmkml/master

Browse source 
Add Maze Ransomware
This commit is contained in:
Alexandre Dulaunoy 2019-11-21 14:13:17 +01:00 committed by GitHub
commit 8240fe1722
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
clusters/ransomware.json
View file

@ -13559,7 +13559,20 @@
}, },
"uuid": "6cea5546-1e2c-333a-4faf-033d461360b5", "uuid": "6cea5546-1e2c-333a-4faf-033d461360b5",
"value": "Desync" "value": "Desync"
},
{
"description": "Maze Ransomware encrypts files and makes them inaccessible while adding a custom extension containing part of the ID of the victim. The ransom note is placed inside a text file and an htm file. There are a few different extensions appended to files which are randomly generated.",
"meta": {
"encryption": "ChaCha20 and RSA",
"refs": [
"https://malpedia.caad.fkie.fraunhofer.de/details/win.maze",
"https://www.bleepingcomputer.com/news/security/maze-ransomware-now-delivered-by-spelevo-exploit-kit/",
"https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us"
]
},
"uuid": "7cea8846-1f3d-331a-3ebf-055d452351b6",
"value": "Maze"
} }
], ],
"version": 71 "version": 72
} }