MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-23 15:27:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add Adwind RAT synonyms

Browse source
This commit is contained in:
Deborah Servili 2017-09-25 15:18:51 +02:00
parent 38f9d2cbfd
commit fecfdd39f3
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
clusters/rat.json
View file

@ -175,11 +175,17 @@
"meta": { "meta": {
"synonyms": [ "synonyms": [
"UNRECOM", "UNRECOM",
"UNiversal REmote COntrol Multi-Platform" "UNiversal REmote COntrol Multi-Platform",
"Frutas",
"AlienSpy",
"Unrecom",
"Jsocket",
"JBifrost"
], ],
"refs": [ "refs": [
"https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf", "https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf",
"https://www.f-secure.com/v-descs/backdoor_java_adwind.shtml" "https://www.f-secure.com/v-descs/backdoor_java_adwind.shtml",
"https://blog.fortinet.com/2016/08/16/jbifrost-yet-another-incarnation-of-the-adwind-rat"
] ]
}, },
"description": "Backdoor:Java/Adwind is a Java archive (.JAR) file that drops a malicious component onto the machines and runs as a backdoor. When active, it is capable of stealing user information and may also be used to distribute other malware. ", "description": "Backdoor:Java/Adwind is a Java archive (.JAR) file that drops a malicious component onto the machines and runs as a backdoor. When active, it is capable of stealing user information and may also be used to distribute other malware. ",