MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

pimp and agreggate turla

Browse source
This commit is contained in:
Thanat0s 2017-02-26 23:24:51 +01:00
parent 3774f05237
commit f1ea577e95
1 changed files with 16 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
clusters/tool.json
View file

@ -525,10 +525,22 @@
} }
}, },
{ {
"value": "Turla" "value": "Turla",
}, "description": "Family of related sophisticated backdoor software - Name comes from Microsoft detection signature – anagram of Ultra (Ultra3) was a name of the fake driver).",
{ "meta": {
"value": "Uroburos" "synonyms": [
"Snake",
"Uroburos",
"Urouros"
],
"refs": [
"https://www.first.org/resources/papers/tbilisi2014/turla-operations_and_development.pdf"
],
"type": [
"Backdoor",
"Rootkit"
]
}
}, },
{ {
"value": "Winexe" "value": "Winexe"