From ec6b04cf6a6fd0a86fd3f08e4bcb9e3887f1ee19 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 10 Oct 2018 14:05:24 +0200
Subject: [PATCH] add SAVEfiles ransomware

---
 clusters/ransomware.json | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index f8c0668..0c73b7c 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -10598,7 +10598,23 @@
         ]
       },
       "uuid": "c49f88f6-c87d-11e8-b005-d76e8162ced5"
+    },
+    {
+      "value": "SAVEfiles",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-pushing-the-savefiles-ransomware/"
+        ],
+        "extensions": [
+          ".SAVEfiles."
+        ],
+        "ransomnotes": [
+          "!!!SAVE__FILES__INFO!!!.txt",
+          "https://www.bleepstatic.com/images/news/security/f/fallout-exploit-kit/savefiles/ransom-note-red.jpg"
+        ]
+      },
+      "uuid": "76bfb132-cc70-11e8-8623-bb3f209be6c9"
     }
   ],
-  "version": 36
+  "version": 37
 }