Deborah Servili
|
faa16879da
|
add TheOneSpy
|
2018-11-16 13:10:21 +01:00 |
|
|
c9fd60d14b
|
chg: [threat-actor] INDRIK SPIDER added
|
2018-11-14 20:46:06 +01:00 |
|
Deborah Servili
|
ca33f1c2ce
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-11-13 15:25:34 +01:00 |
|
Deborah Servili
|
f55277b682
|
add several rqansomware and HookAds campaign
|
2018-11-13 12:20:37 +01:00 |
|
|
a505995b79
|
fix: [ransomware] duplicate removed
|
2018-11-13 07:12:36 +01:00 |
|
|
51d3af11fc
|
chg: [ransomware] duplicate removed
|
2018-11-13 07:08:49 +01:00 |
|
|
a4c916c916
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2018-11-13 07:01:56 +01:00 |
|
Benoit Sevens
|
8f8c69134e
|
Update threat-actor.json
Add LuckyMouse link
|
2018-11-12 13:12:14 +01:00 |
|
Deborah Servili
|
46dba06e40
|
add/update ransomawares
|
2018-11-09 16:34:00 +01:00 |
|
Deborah Servili
|
14444e4321
|
add several tools and refs
|
2018-11-08 10:39:32 +01:00 |
|
Daniel Plohmann
|
1f6b606f75
|
added APT38 as (FireEye) alias for Lazarus
cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.
|
2018-11-07 17:19:50 +01:00 |
|
Deborah Servili
|
954264c084
|
Merge pull request #296 from Delta-Sierra/master
update ransomware galaxy
|
2018-11-07 09:19:23 +01:00 |
|
Deborah Servili
|
d41a279c73
|
update ransomware galaxy
|
2018-11-05 16:23:10 +01:00 |
|
|
8ae3214cd1
|
Merge pull request #295 from Delta-Sierra/master
update Red Alert 2 Android Banking Trojan
|
2018-11-05 12:37:29 +01:00 |
|
Deborah Servili
|
050a94a2c0
|
jq fix
|
2018-11-05 11:01:57 +01:00 |
|
Deborah Servili
|
ae24b71f45
|
update version
|
2018-11-05 10:45:54 +01:00 |
|
Deborah Servili
|
5fd4cfa4ee
|
update Red Alert 2 Android Banking Trojan
|
2018-11-05 09:50:10 +01:00 |
|
Deborah Servili
|
7813a29460
|
Merge pull request #294 from Delta-Sierra/master
add ransomwares
|
2018-10-31 16:05:18 +01:00 |
|
Deborah Servili
|
ad07b70a03
|
add ransomwares
|
2018-10-31 14:52:40 +01:00 |
|
|
2465235817
|
Merge pull request #293 from Delta-Sierra/master
add Operation EvilTraffic
|
2018-10-30 21:02:59 +01:00 |
|
Deborah Servili
|
e6b1eec329
|
add Chalubo botnet (+ jqallthethings)
|
2018-10-30 14:39:13 +01:00 |
|
Deborah Servili
|
41942d0daf
|
add Operation EvilTraffic
|
2018-10-30 13:28:46 +01:00 |
|
Deborah Servili
|
74ff4b957a
|
add Operation EvilTraffic
|
2018-10-30 13:28:27 +01:00 |
|
Nils Kuhnert
|
bc0bf1ca9f
|
Corrected DarkHotel threat actor entry
|
2018-10-29 09:03:30 +01:00 |
|
Deborah Servili
|
6e8abc0712
|
fix duplicate ref
|
2018-10-23 15:37:51 +02:00 |
|
Deborah Servili
|
af6020077e
|
add August Stealer
|
2018-10-23 15:25:37 +02:00 |
|
Deborah Servili
|
4a54044de6
|
add NukeSped reference
|
2018-10-22 14:50:57 +02:00 |
|
Deborah Servili
|
32d90a27e1
|
add GhostMiner
|
2018-10-22 14:46:44 +02:00 |
|
Deborah Servili
|
bd68ee280e
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-10-22 11:09:37 +02:00 |
|
Deborah Servili
|
504570a298
|
add tools from https://github.com/misterch0c/shadowbroker
|
2018-10-22 11:06:25 +02:00 |
|
Deborah Servili
|
4564c5eb37
|
add DarkPulsar and affiliates + update some refs
|
2018-10-22 10:14:30 +02:00 |
|
Christophe Vandeplas
|
4232f0b737
|
chg: further categorization of galaxies
|
2018-10-19 14:15:20 +02:00 |
|
Christophe Vandeplas
|
9dddc4427c
|
jq
|
2018-10-19 10:23:09 +02:00 |
|
Christophe Vandeplas
|
6a9a9b7e1b
|
Merge remote-tracking branch 'MISP/master'
|
2018-10-19 10:18:45 +02:00 |
|
Christophe Vandeplas
|
ddccac58c8
|
chg: categorization of galaxies
This allows relationships to be created.
|
2018-10-19 10:18:14 +02:00 |
|
|
0ecf34f06e
|
fix: [malpedia] version
|
2018-10-18 11:23:48 +02:00 |
|
|
83c6e6bef1
|
fix: [malpedia] broken reference has been fixed
|
2018-10-18 11:17:19 +02:00 |
|
|
3771c21218
|
Merge pull request #287 from cvandeplas/master
fixes an important bug in the gen_relations
|
2018-10-18 11:15:17 +02:00 |
|
|
66ded6d935
|
Some minor fixes
|
2018-10-17 20:59:08 +02:00 |
|
Christophe Vandeplas
|
ccebd86eed
|
fix: add missing relations from commit 78c1f07359
|
2018-10-17 19:18:16 +02:00 |
|
Christophe Vandeplas
|
2b24efb14a
|
fix: add missing relations from commit b857be9cab
|
2018-10-17 19:15:57 +02:00 |
|
Christophe Vandeplas
|
76b1429f10
|
fix: add missing relations from commit a81bbe288f
|
2018-10-17 19:13:35 +02:00 |
|
Christophe Vandeplas
|
84af053761
|
fix: add missing relations from commit 29beb01dc3
|
2018-10-17 19:07:01 +02:00 |
|
Christophe Vandeplas
|
873bc873b4
|
Merge remote-tracking branch 'MISP/master'
|
2018-10-17 18:28:44 +02:00 |
|
Christophe Vandeplas
|
1e90cac717
|
fix: intrusion is an actor and not a tool
|
2018-10-17 18:17:33 +02:00 |
|
|
9129724343
|
Merge pull request #286 from Delta-Sierra/master
Several clusters, refs, others.
|
2018-10-17 17:32:45 +02:00 |
|
Deborah Servili
|
c8cbb609a2
|
add GreyEnergy
|
2018-10-17 16:05:51 +02:00 |
|
Christophe Vandeplas
|
ca6c1caa8f
|
fix: jq all the things
|
2018-10-17 08:26:45 +02:00 |
|
Christophe Vandeplas
|
2bb4df134b
|
chg: removal of older unused relationships
|
2018-10-17 08:20:12 +02:00 |
|
Christophe Vandeplas
|
c51ba2e868
|
chg: MITRE relationships included in the respective cluster.
|
2018-10-17 08:08:58 +02:00 |
|
Deborah Servili
|
2ea560f9a7
|
add refs & synonyms
|
2018-10-15 12:02:21 +02:00 |
|
Deborah Servili
|
c134035a6d
|
add several refs
|
2018-10-15 11:33:37 +02:00 |
|
Deborah Servili
|
8d0c87c830
|
add several refs
|
2018-10-15 11:28:01 +02:00 |
|
Deborah Servili
|
11a27df82d
|
add roaming mantis group
|
2018-10-12 15:50:52 +02:00 |
|
Deborah Servili
|
b3109f6aea
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-10-12 13:55:01 +02:00 |
|
Christophe Vandeplas
|
f26a4f2806
|
fix: minor newline difference after jq_all_the
|
2018-10-12 12:31:29 +02:00 |
|
Christophe Vandeplas
|
f14d616e22
|
chg: magical mapping with malpedia
|
2018-10-12 11:00:00 +02:00 |
|
Christophe Vandeplas
|
65eb66a739
|
fix: automatically fix missing uuids
|
2018-10-12 10:55:24 +02:00 |
|
Christophe Vandeplas
|
2fbd8ce485
|
jq sort keys
Allows automation to edit the files
|
2018-10-12 10:35:31 +02:00 |
|
|
4ff2a45cbb
|
chg: [malpedia] duplicate urls removed
|
2018-10-10 22:18:32 +02:00 |
|
|
2d2749ccea
|
jq all the things
|
2018-10-10 22:12:59 +02:00 |
|
Steffen Enders
|
125f676d17
|
Updated malpedia.json to the current state
Fetched the new malpedia galaxy cluster from https://malpedia.caad.fkie.fraunhofer.de/api/get/misp - this includes an additional ~120 new families.
|
2018-10-10 17:31:27 +02:00 |
|
Deborah Servili
|
4c367737ac
|
add magecart ref
|
2018-10-10 14:52:16 +02:00 |
|
Deborah Servili
|
ec6b04cf6a
|
add SAVEfiles ransomware
|
2018-10-10 14:05:24 +02:00 |
|
Deborah Servili
|
ed5aa150a7
|
update version
|
2018-10-09 11:35:17 +02:00 |
|
Deborah Servili
|
510a37084c
|
update matrix ransomware
|
2018-10-08 16:26:58 +02:00 |
|
Deborah Servili
|
5fb9db8282
|
add Triout Android Malware
|
2018-10-05 16:21:01 +02:00 |
|
Deborah Servili
|
655b1619e4
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-10-05 16:06:25 +02:00 |
|
Deborah Servili
|
58a86e4e26
|
fix failed copy-paste
|
2018-10-05 15:53:03 +02:00 |
|
|
8149960aa3
|
Merge pull request #276 from Delta-Sierra/master
add CoalaBot + Kraken Cryptor Ransmware + refs
|
2018-10-05 15:52:04 +02:00 |
|
Davide Arcuri
|
253fbed356
|
Added Malpedia Galaxy
based on malpedia git repo
Co-Authored-By: garanews <garanews@users.noreply.github.com>
|
2018-10-05 14:30:31 +02:00 |
|
Deborah Servili
|
80bf2f5556
|
jq
|
2018-10-05 12:04:13 +02:00 |
|
Deborah Servili
|
06c4869125
|
add CoalaBot + Kraken Cryptor Ransmware + refs
|
2018-10-05 11:09:54 +02:00 |
|
Deborah Servili
|
9225666b92
|
add CoalaBot + Kraken Cryptor Ransmware + refs
|
2018-10-05 11:09:45 +02:00 |
|
|
ecba2dbdbf
|
Merge pull request #274 from Delta-Sierra/master
Refs updates
|
2018-10-04 17:24:57 +02:00 |
|
Deborah Servili
|
7cf37a57f1
|
add Persirai botnet
|
2018-10-04 14:17:16 +02:00 |
|
Deborah Servili
|
50fecccf39
|
update Torii botnet
|
2018-10-04 13:44:32 +02:00 |
|
Deborah Servili
|
138a4e6f9e
|
add ref for Torii botnet
|
2018-10-04 13:41:27 +02:00 |
|
Deborah Servili
|
b45b4ce0b1
|
add refs
|
2018-10-04 12:01:26 +02:00 |
|
|
276992f180
|
Merge pull request #273 from Delta-Sierra/master
update synonyms & attributions
|
2018-10-04 11:17:19 +02:00 |
|
Deborah Servili
|
2893d715d6
|
Add ZEBROCY tool
|
2018-10-04 10:52:40 +02:00 |
|
Deborah Servili
|
5bcf34a953
|
update regarding https://twitter.com/adulau/status/1047764090410737664
|
2018-10-04 10:28:22 +02:00 |
|
Deborah Servili
|
c78416eee1
|
update synonyms & attributions
|
2018-10-04 10:09:34 +02:00 |
|
Deborah Servili
|
123099cd6d
|
Merge pull request #272 from Delta-Sierra/master
New clusters based on CIG Circular 66 – FASTCash ATM Cash Out Campaign
|
2018-10-03 16:38:33 +02:00 |
|
Deborah Servili
|
4d68b1c205
|
add NukeSped
|
2018-10-03 16:28:50 +02:00 |
|
Deborah Servili
|
3dfe8a5a34
|
add FASTCash
|
2018-10-03 15:09:14 +02:00 |
|
|
63b777fc9e
|
Merge pull request #271 from Delta-Sierra/master
Several updates
|
2018-10-01 21:51:11 +02:00 |
|
Deborah Servili
|
403f162451
|
add ref for magecart
|
2018-10-01 11:54:07 +02:00 |
|
Deborah Servili
|
35582f7ed5
|
new threat actors & tools
|
2018-10-01 11:52:40 +02:00 |
|
|
2402c7d98f
|
chg: [tool] NOKKI added
ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-new-konni-malware-attacking-eurasia-southeast-asia/
|
2018-09-29 09:01:47 +02:00 |
|
Deborah Servili
|
3649e03ad5
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-09-28 16:28:16 +02:00 |
|
Deborah Servili
|
f828c8f79e
|
add synonym
|
2018-09-28 16:18:54 +02:00 |
|
Deborah Servili
|
a27534cfa1
|
add refs
|
2018-09-28 15:40:00 +02:00 |
|
|
49fe210812
|
Merge pull request #270 from Delta-Sierra/master
new clusters, relations and information
|
2018-09-28 12:57:13 +02:00 |
|
Deborah Servili
|
97581d7185
|
jq
|
2018-09-28 11:20:38 +02:00 |
|
Deborah Servili
|
fbf21487cf
|
new clusters and informtion
|
2018-09-28 11:08:21 +02:00 |
|
|
46eddf1874
|
chg: [botnet] Torii added
|
2018-09-27 15:43:49 +02:00 |
|
Deborah Servili
|
78c1f07359
|
new ransomware and relations
|
2018-09-27 15:42:20 +02:00 |
|
Nex
|
014aa325b7
|
Added missing country values
|
2018-09-26 23:05:46 +02:00 |
|
Deborah Servili
|
29beb01dc3
|
add relationships on Mirai
|
2018-09-24 16:06:36 +02:00 |
|
Deborah Servili
|
f7e10cb38d
|
add references
|
2018-09-24 14:58:21 +02:00 |
|
Deborah Servili
|
77897be97e
|
add BusyGasper android spyware
|
2018-09-24 12:12:41 +02:00 |
|
Deborah Servili
|
2bc8e1e719
|
add Cobalt Dickensthreat actor
|
2018-09-24 11:51:09 +02:00 |
|
Deborah Servili
|
69c5fc30e5
|
add remcos ref
|
2018-09-24 11:07:17 +02:00 |
|
Deborah Servili
|
5a1734f170
|
update version
|
2018-09-21 11:16:36 +02:00 |
|
Deborah Servili
|
3c7e367cbf
|
fix field mistake
|
2018-09-21 11:14:19 +02:00 |
|
Deborah Servili
|
1cee9d71e0
|
update Lazarus group cluster
|
2018-09-20 15:38:32 +02:00 |
|
Deborah Servili
|
6d43d52731
|
new unnamedthreat actor
|
2018-09-20 13:24:11 +02:00 |
|
Deborah Servili
|
d0864a6531
|
new threat actors
|
2018-09-20 12:10:20 +02:00 |
|
Deborah Servili
|
0a724bee3d
|
merge
|
2018-09-19 16:01:46 +02:00 |
|
Deborah Servili
|
3f22dbd17d
|
add notpetya and update jadeRAT
|
2018-09-19 15:06:43 +02:00 |
|
Deborah Servili
|
058f778e61
|
add references
|
2018-09-19 09:04:04 +02:00 |
|
|
79146b9d10
|
fix: array in synonyms (MISP accepts it but not the schema ;-)
|
2018-09-19 07:35:35 +02:00 |
|
|
6105522453
|
chg: [threat-actor] Iron Group added
ref: https://www.intezer.com/iron-cybercrime-group-under-the-scope-2/
|
2018-09-19 07:08:16 +02:00 |
|
|
4ae0ccd192
|
chg: [tool] Xbash added
ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-xbash-combines-botnet-ransomware-coinmining-worm-targets-linux-windows/
|
2018-09-19 07:03:56 +02:00 |
|
|
8238bd5eb1
|
Merge pull request #263 from botherder/bahamut
Added Bahamut to threat actors list
|
2018-09-19 06:46:26 +02:00 |
|
Deborah Servili
|
fd960bfc1b
|
Add magentocore malware
|
2018-09-18 23:10:33 +02:00 |
|
Nex
|
f0383758fc
|
Added Bahamut to threat actors list
|
2018-09-18 11:27:32 +02:00 |
|
|
fe60e58f5b
|
Merge pull request #262 from botherder/mythic-leopard
Added additional name to C-Major
|
2018-09-18 11:25:58 +02:00 |
|
Nex
|
1e502a494e
|
Added additional name to C-Major
|
2018-09-18 11:18:42 +02:00 |
|
Nex
|
ee7f609397
|
Removed duplicates
|
2018-09-18 11:16:00 +02:00 |
|
|
88c9d8d9f6
|
Merge pull request #259 from botherder/country-sync
Synced country codes with suspected state sponsor
|
2018-09-17 18:18:00 +02:00 |
|
Nex
|
be0dd94c90
|
Synced country codes with suspected state sponsor
|
2018-09-17 16:26:14 +02:00 |
|
Nex
|
c2ea505459
|
Merged Transparent Tribe in C-Major
|
2018-09-17 16:11:18 +02:00 |
|
Deborah Servili
|
ff9409e164
|
add blacknurse logo
|
2018-09-13 12:42:01 +02:00 |
|
Deborah Servili
|
1dcf2e50a7
|
add blacknurse
|
2018-09-13 12:33:19 +02:00 |
|
Deborah Servili
|
17d3959445
|
add Crypt0saur ransomware
|
2018-09-13 11:34:57 +02:00 |
|
Deborah Servili
|
0843fdfb23
|
adding and updating clusters
|
2018-09-13 09:03:41 +02:00 |
|
Deborah Servili
|
039fc91bd6
|
add description for sigma ransomware
|
2018-09-12 14:27:09 +02:00 |
|
Deborah Servili
|
a73424139f
|
fix versions
|
2018-09-12 14:26:44 +02:00 |
|
Deborah Servili
|
f107563cad
|
add ref for operation Applejeus
|
2018-09-12 09:34:16 +02:00 |
|
Deborah Servili
|
cb5fa5e822
|
fix version
|
2018-09-10 14:21:14 +02:00 |
|
Deborah Servili
|
c92dc15937
|
add Operation AppleJeus
|
2018-09-10 14:13:09 +02:00 |
|
Deborah Servili
|
a81bbe288f
|
fix some relations
|
2018-09-10 12:27:40 +02:00 |
|
Deborah Servili
|
40d5cca20f
|
clusters
|
2018-09-07 16:03:40 +02:00 |
|
Deborah Servili
|
addda6c545
|
more clusters~
|
2018-09-05 16:39:33 +02:00 |
|
Deborah Servili
|
14024efbf1
|
add CamuBot Banker Trojan
|
2018-09-05 09:19:35 +02:00 |
|
Deborah Servili
|
5866b660c8
|
jq~
|
2018-09-05 08:29:08 +02:00 |
|
Deborah Servili
|
fb328b0ef4
|
add ransomwares
|
2018-09-05 08:20:24 +02:00 |
|
Deborah Servili
|
0a9e91766b
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-09-04 10:18:07 +02:00 |
|
Deborah Servili
|
912e91a5f5
|
add ransomware
|
2018-09-04 09:43:58 +02:00 |
|
|
0acc41131d
|
"jq all the thing (tm)"
|
2018-09-01 11:58:52 +02:00 |
|
|
e55f91b7ac
|
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master
|
2018-09-01 11:56:10 +02:00 |
|
Kafeine
|
ac94f367b1
|
+ Fallout
|
2018-09-01 10:07:46 +02:00 |
|
Kafeine
|
21cf5ec957
|
Hunter EK > Active
|
2018-08-30 22:47:00 +02:00 |
|
Kafeine
|
85130f264d
|
Adding Underminer EK
|
2018-08-30 17:27:59 +02:00 |
|
Kafeine
|
afa3fb4cfd
|
Status from Terror, Bingo and Astrum
|
2018-08-30 17:08:37 +02:00 |
|
Kafeine
|
67e9ef2719
|
Adapting to modification from Misp repository
|
2018-08-30 17:04:08 +02:00 |
|
Deborah Servili
|
f14dd27315
|
add cfr data
|
2018-08-27 15:29:16 +02:00 |
|
Deborah Servili
|
d1940b6a69
|
Update microsoft-activity-group.json version
|
2018-08-27 08:38:22 +02:00 |
|
Deborah Servili
|
9efca2fd79
|
more clusters
Signed-off-by: Deborah Servili <deborah.servili@gmail.com>
|
2018-08-24 16:11:16 +02:00 |
|
Deborah Servili
|
c943d1c9d1
|
add APT28/STRONTIUM refs
|
2018-08-22 09:59:40 +02:00 |
|
Deborah Servili
|
afea4ca5e7
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2018-08-22 09:03:26 +02:00 |
|
|
f8c5640613
|
chg: [tool] biscuit biscvt tool BISKVIT
ref: https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html
|
2018-08-21 10:48:47 +02:00 |
|
|
cd76f19f52
|
chg: [threat-actor] APT-C-35 actor added
ref: https://ti.360.net/blog/articles/latest-activity-of-apt-c-35/
|
2018-08-15 20:25:57 +02:00 |
|
Deborah Servili
|
3940964956
|
update Dharma Ransomware
|
2018-08-14 15:56:09 +02:00 |
|
Deborah Servili
|
d5f35d94dc
|
version update
|
2018-08-14 12:21:50 +02:00 |
|
Deborah Servili
|
f3c02ad195
|
merge black ruby duplicate (delete the newer)
|
2018-08-14 12:20:29 +02:00 |
|
Deborah Servili
|
31142b41ac
|
merge
|
2018-08-14 12:09:21 +02:00 |
|
Deborah Servili
|
a28c50203e
|
fix
|
2018-08-14 12:07:12 +02:00 |
|
Deborah Servili
|
2081dc1627
|
resolve merge confilct -I hope-
|
2018-08-14 12:06:42 +02:00 |
|
Deborah Servili
|
4e911b2c17
|
Merge branch 'master' into master
|
2018-08-14 11:43:59 +02:00 |
|
Deborah Servili
|
7829e0fab6
|
fix typo and missing uuid
|
2018-08-14 11:41:06 +02:00 |
|
Deborah Servili
|
a646a835fe
|
add Rosenbridge backdoor
|
2018-08-14 10:09:26 +02:00 |
|
Christophe Vandeplas
|
88162aa44e
|
chg: [mapping] Generated automatic mapping between clusters
|
2018-08-14 09:35:22 +02:00 |
|
Christophe Vandeplas
|
5478f0aa45
|
no change: dump files with sort_keys=True
This is needed to keep better track of the changes when other tools load and save the json files.
|
2018-08-13 17:06:29 +02:00 |
|
Christophe Vandeplas
|
021107e597
|
fix: [threat-actor] added missing uuids
|
2018-08-13 17:00:40 +02:00 |
|
Deborah Servili
|
b100b0cedd
|
add KEYPASS ransomware
|
2018-08-13 15:50:09 +02:00 |
|
Deborah Servili
|
f1dcb05576
|
Merge pull request #246 from Delta-Sierra/master
add Skygofree android spyware
|
2018-08-13 12:28:30 +02:00 |
|
Deborah Servili
|
56fe9eb63c
|
add Skygofree android spyware
|
2018-08-13 12:20:16 +02:00 |
|
|
9059a85eed
|
chg: [tool] KEYMARBLE malware added
ref: https://www.us-cert.gov/ncas/analysis-reports/AR18-221A
|
2018-08-11 16:14:39 +02:00 |
|
Deborah Servili
|
27805ca768
|
add tools used by SamSam
|
2018-08-09 15:55:36 +02:00 |
|
Deborah Servili
|
597e7bacb9
|
add ransomwares
|
2018-08-09 13:53:04 +02:00 |
|
|
6620b5575a
|
fix: [threat-actor] related is an array of JSON objects
|
2018-08-09 07:53:42 +02:00 |
|
|
1429b60555
|
chg: [threat-actor] jq document
|
2018-08-08 16:38:39 +02:00 |
|
Deborah Servili
|
ebc7287e14
|
update schema
|
2018-08-08 16:12:29 +02:00 |
|
Deborah Servili
|
33a300b773
|
tags is an array
|
2018-08-08 15:59:44 +02:00 |
|
Deborah Servili
|
b857be9cab
|
relationship system - v2
|
2018-08-08 15:51:22 +02:00 |
|
Deborah Servili
|
050a864be0
|
update some clusters and try to add a relationship system
|
2018-08-08 14:20:38 +02:00 |
|
Deborah Servili
|
84adb50f0f
|
add RedAlpha campaigns
|
2018-08-07 13:55:05 +02:00 |
|
Deborah Servili
|
b7de06ffcc
|
delete forgotten conflict marker
|
2018-08-06 08:49:44 +02:00 |
|
Deborah Servili
|
010df0a2b6
|
resolve merge conflict
|
2018-08-06 08:48:21 +02:00 |
|
Deborah Servili
|
def23775e5
|
resolve merge conflict
|
2018-08-06 08:45:03 +02:00 |
|
Nils Kuhnert
|
ab49b58b02
|
Added DarkHydrus
|
2018-08-06 08:33:34 +02:00 |
|
Nils Kuhnert
|
4654f51889
|
Two small typos
|
2018-08-05 15:09:38 +02:00 |
|
Deborah Servili
|
e5b185deee
|
Merge branch 'master' into master
|
2018-08-03 16:11:16 +02:00 |
|
Deborah Servili
|
35aa8ba34e
|
delete duplicate gorgon group
|
2018-08-03 16:08:43 +02:00 |
|
Deborah Servili
|
a9a71ef84c
|
more clusters
|
2018-08-03 15:58:54 +02:00 |
|
|
b3701b6b34
|
chg: [threat-actor] The Gordon Group added
ref: https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/
|
2018-08-03 10:26:52 +02:00 |
|
|
a0dfdd65ae
|
chg: [rat] Hallaj PRO Rat added
ref: https://securelist.com/attacks-on-industrial-enterprises-using-rms-and-teamviewer/87104/
misp-event: 5b63f5e4-bf24-4f46-8340-48fc02de0b81
|
2018-08-03 08:34:55 +02:00 |
|
|
3da005a3f3
|
fix: jq all the things(tm)
|
2018-08-02 15:15:47 +02:00 |
|
|
1fdf47d509
|
fix: [threat-actor] synonyms are always arraus
|
2018-08-02 15:13:18 +02:00 |
|
|
ece56dff38
|
chg: [threat-actor] leafminer - RASPITE added
|
2018-08-02 15:08:39 +02:00 |
|
|
c232b3dd5a
|
chg: [tool] added based on Carbanak tooling description from Crowdstrike
ref: https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/
|
2018-08-02 10:30:47 +02:00 |
|
|
43fa95df7a
|
chg: [threat-actor] new reference to CARBON SPIDER/Carbanak
|
2018-08-02 10:03:18 +02:00 |
|
|
4cf84858e3
|
chg: [tool] Bisonal malware added (new variant with encryption capabilities)
|
2018-07-31 15:26:11 +02:00 |
|
Deborah Servili
|
e7d2541929
|
add Kronos Banking Trojan
|
2018-07-25 09:46:46 +02:00 |
|
Deborah Servili
|
381f7e4a19
|
Add CFR.org metadata into the galaxy - part 2
|
2018-07-25 09:08:16 +02:00 |
|
Deborah Servili
|
28456545be
|
Merge https://github.com/MISP/misp-galaxy
|
2018-07-16 09:16:13 +02:00 |
|
|
98db303047
|
chg: [threat-actor] The Big Bang campaign/group added
|
2018-07-10 08:49:00 +02:00 |
|
|
43a2c7f0ef
|
chg: [botnet] Xor DDoS added
|
2018-07-09 14:25:19 +02:00 |
|
raw-data
|
77cfaa8221
|
[add] new backdoor galaxy and cluster
|
2018-07-06 20:09:52 +01:00 |
|
Raphaël Vinot
|
e5939e3248
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2018-07-06 15:25:09 +02:00 |
|
Raphaël Vinot
|
6f7a7921ae
|
new: Add entries from Bambenek Consulting
|
2018-07-06 15:25:05 +02:00 |
|
raw-data
|
fa8d0e35f6
|
[add] x1 new entry in stealer.json - AZORult
|
2018-07-06 11:00:11 +01:00 |
|
Deborah Servili
|
cae0f7e1ad
|
merging attempt
|
2018-06-29 16:39:34 +02:00 |
|
Deborah Servili
|
8c51ef98b3
|
add cfr related informations -still in progress-
|
2018-06-29 16:36:58 +02:00 |
|
Deborah Servili
|
fb6b01cc95
|
Merge branch 'master' into master
|
2018-06-27 09:39:28 +02:00 |
|
Deborah Servili
|
b1aac6b35b
|
cfr update -in progress + add clusters associated to RANCOR
|
2018-06-27 09:37:43 +02:00 |
|
|
1bd0fb34d7
|
Merge pull request #233 from Delta-Sierra/master
Add CFR.org metadata into the galaxy - Test
|
2018-06-26 14:26:18 +02:00 |
|
Deborah Servili
|
6f9e639981
|
add cfr prefix for cfr data - test
|
2018-06-26 10:07:14 +02:00 |
|
Deborah Servili
|
1cd6bddf0c
|
Add CFR.org metadata into the galaxy - Test
|
2018-06-26 09:40:13 +02:00 |
|
Deborah Servili
|
3838efb0bb
|
some updates
|
2018-06-26 09:26:32 +02:00 |
|
raw-data
|
f649af8ba5
|
[ADD] x1 new entry in tool.json - Koadic
|
2018-06-25 15:59:30 +01:00 |
|
raw-data
|
b3dffeb8d4
|
[ADD] x2 new rat - Sisfader, SocketPlayer
|
2018-06-25 15:46:42 +01:00 |
|
raw-data
|
0920d13c05
|
[ADD] banker.json version bump
|
2018-06-25 15:41:32 +01:00 |
|
raw-data
|
b382425d9c
|
[ADD] x2 new banker - Backswap, Karius
|
2018-06-25 15:14:56 +01:00 |
|
Nils Kuhnert
|
ed26cfb042
|
Updated APT1 report link
|
2018-06-22 13:49:05 +02:00 |
|
Deborah Servili
|
8ebde0540a
|
Update cert-eu-govsector.json
|
2018-06-22 12:50:32 +02:00 |
|
Deborah Servili
|
e088194ea9
|
fix typo in type
|
2018-06-22 12:45:39 +02:00 |
|
|
8e014674af
|
Fixed typo
|
2018-06-20 09:45:16 +02:00 |
|
Deborah Servili
|
dcda058944
|
update verion
|
2018-06-20 09:36:36 +02:00 |
|
Deborah Servili
|
e18fdf42da
|
add Thrip as threat actor
|
2018-06-20 09:30:15 +02:00 |
|
Deborah Servili
|
dcd159f8ed
|
add olympic destroyer
|
2018-06-19 15:26:40 +02:00 |
|
Deborah Servili
|
92cbd29091
|
add severals ransomware
|
2018-06-19 13:04:32 +02:00 |
|
Deborah Servili
|
cee83f677e
|
more clusters
|
2018-06-18 14:30:51 +02:00 |
|
Deborah Servili
|
d8c83cf2d6
|
add cluster in threat actor
|
2018-06-18 10:54:58 +02:00 |
|
Deborah Servili
|
ab577afacd
|
add ClipboardWalletHijacker
|
2018-06-18 09:47:03 +02:00 |
|
Deborah Servili
|
333db20791
|
add MysteryBot in android galaxy
|
2018-06-18 08:41:52 +02:00 |
|
Deborah Servili
|
397b37dcc8
|
add some ransomwares
|
2018-06-15 15:14:42 +02:00 |
|
|
e6bae7165c
|
Merge pull request #224 from Delta-Sierra/master
add some clusters
|
2018-06-13 12:43:35 +02:00 |
|
Deborah Servili
|
4ac23483b9
|
add some tools
|
2018-06-13 11:54:50 +02:00 |
|
Deborah Servili
|
cef7d02622
|
update version
|
2018-06-13 11:06:31 +02:00 |
|
Deborah Servili
|
c17a2aa7cc
|
add some clusters
|
2018-06-13 10:39:11 +02:00 |
|
Christophe Vandeplas
|
db81051154
|
minor layout corrections - validate_all
|
2018-06-12 11:03:09 +02:00 |
|
Christophe Vandeplas
|
d0d54b2751
|
merge pull request 222
|
2018-06-12 10:58:08 +02:00 |
|
Deborah Servili
|
508bb081c8
|
add BabaYaga Malware
|
2018-06-08 15:54:30 +02:00 |
|
Deborah Servili
|
2b447585b6
|
add PLEAD
|
2018-06-08 10:18:41 +02:00 |
|
Kafeine
|
25d21204fb
|
fix
|
2018-06-07 10:34:55 +01:00 |
|
Kafeine
|
52f0858ef5
|
+ Glazunov
|
2018-06-07 10:31:58 +01:00 |
|
Deborah Servili
|
a96a8a4a13
|
add sigrun ransomware's ransomnotes
|
2018-06-07 09:33:08 +02:00 |
|
Kafeine
|
178d5219c7
|
guuid & + VenomKit
|
2018-06-06 18:00:25 +01:00 |
|
Deborah Servili
|
e561e3e4f0
|
add Sigrun ransomwaremeta data
|
2018-06-06 16:29:24 +02:00 |
|
Deborah Servili
|
e2a25e165d
|
add Sigrun ransomware
|
2018-06-06 16:12:31 +02:00 |
|
Deborah Servili
|
07f91bcca4
|
add another cryptomix variant
|
2018-06-06 15:44:32 +02:00 |
|
Deborah Servili
|
3e91466aea
|
add Brambul worm
|
2018-06-06 15:07:30 +02:00 |
|
Deborah Servili
|
3e10d0957c
|
add Joanap RAT
|
2018-06-06 14:34:42 +02:00 |
|
|
308774755c
|
add: Iron Backdoor
|
2018-06-03 18:39:37 +02:00 |
|
raw-data
|
388a2b25b3
|
[ADD] x2 new info/pwd stealers - Nocturnal Stealer, TeleGrab
|
2018-06-01 15:59:25 +01:00 |
|
raw-data
|
ba6892408b
|
[ADD] NavRAT
|
2018-06-01 15:09:22 +01:00 |
|
raw-data
|
42bb2175e2
|
[ADD] DanaBot
|
2018-06-01 15:08:55 +01:00 |
|
|
6d5b8de216
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2018-05-29 21:47:59 +02:00 |
|
|
c08c6af936
|
chg: Stalker Panda description added
|
2018-05-29 21:47:04 +02:00 |
|
raw-data
|
8726e0542d
|
[ADD] VPNFilter in tool.json cluster
|
2018-05-26 23:49:59 +01:00 |
|
raw-data
|
b0396e5ea2
|
[ADD] Pontoeb, WICKED and Brain Food into botnet.json cluster
|
2018-05-24 16:39:24 +01:00 |
|
Raphaël Vinot
|
ca964d9d35
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2018-05-19 17:58:23 -04:00 |
|
Raphaël Vinot
|
96f3bf1cb8
|
fix: Duplicate ELECTRUM entry
Fix #212
|
2018-05-19 17:57:51 -04:00 |
|
Deborah Servili
|
22cb1618a5
|
Merge pull request #214 from Delta-Sierra/master
update mitre galaxies - add external id and killchain
|
2018-05-19 13:21:18 +02:00 |
|
Deborah Servili
|
6c8edd3f61
|
jq
|
2018-05-19 13:09:50 +02:00 |
|
Deborah Servili
|
d82a76c08f
|
fix scripts for nobile and pre attack attack pattern
|
2018-05-19 13:09:30 +02:00 |
|
Deborah Servili
|
f6d7291e7a
|
jq
|
2018-05-19 12:57:20 +02:00 |
|
Deborah Servili
|
730353f63d
|
update mitre galaxies - add external id and killchain
|
2018-05-19 12:56:20 +02:00 |
|
|
3a7c4e3c57
|
Merge pull request #211 from eCrimeLabs/master
Added links in relation to Threat-actor info from Dragos
|
2018-05-15 16:17:56 +02:00 |
|
|
9b888f238a
|
Merge pull request #209 from raw-data/master
[ADD] RadRAT, ARS VBS Loader and FlawedAmmyy into rat.json cluster
|
2018-05-15 16:17:18 +02:00 |
|
Dennis Rand
|
1ab4e4f4cf
|
Added data related to Dragos Adverseries
|
2018-05-15 12:06:48 +00:00 |
|
Deborah Servili
|
3d5c697761
|
add Stalinlocker
|
2018-05-15 12:27:20 +02:00 |
|
Deborah Servili
|
5b22aa7225
|
add Mettle botnet
|
2018-05-14 12:00:22 +02:00 |
|
raw-data
|
0ba6233309
|
[ADD] RadRAT, ARS VBS Loader and FlawedAmmyy into rat.json cluster
|
2018-05-11 01:15:35 +01:00 |
|
Deborah Servili
|
5e0bd260d6
|
update some clusters
|
2018-05-09 16:12:02 +02:00 |
|
Deborah Servili
|
2b16c86687
|
add maikspy
|
2018-05-09 09:52:22 +02:00 |
|
Deborah Servili
|
d3f7f7b591
|
jq~
|
2018-05-09 09:34:08 +02:00 |
|
Deborah Servili
|
360a4d4556
|
add reference for HNS botnet
|
2018-05-09 09:29:23 +02:00 |
|
Deborah Servili
|
0d745f6c93
|
add HNS bot net & HPE iLO 4 Ransomware/Wiper
|
2018-05-09 09:22:29 +02:00 |
|
Deborah Servili
|
394950379b
|
add Kitty malware
|
2018-05-07 15:27:29 +02:00 |
|
Deborah Servili
|
1c783a1453
|
update version -oops-
|
2018-05-07 08:52:15 +02:00 |
|
Deborah Servili
|
9cf976b2c5
|
update - GandCrab v3
|
2018-05-07 08:46:31 +02:00 |
|
Deborah Servili
|
d6e4c166c5
|
add an unnamed ransomware
|
2018-05-04 15:59:37 +02:00 |
|
Deborah Servili
|
ba631f1b43
|
add spymaster pro as rat
|
2018-05-04 15:12:56 +02:00 |
|
Deborah Servili
|
58e3e5f5d6
|
add ZooPark campaign
|
2018-05-04 10:16:01 +02:00 |
|
|
6b1d7d2201
|
add: threat actors from Dragos Inc. (based on https://dragos.com/adversaries.html)
|
2018-05-03 21:22:09 +02:00 |
|
Deborah Servili
|
979c784640
|
jq
|
2018-05-03 16:08:27 +02:00 |
|
Deborah Servili
|
83581c62b0
|
add Rubella Macro Builder
|
2018-05-03 15:38:06 +02:00 |
|
Deborah Servili
|
434716df86
|
add GravityRAT
|
2018-05-03 14:35:20 +02:00 |
|
Deborah Servili
|
55504f93d6
|
add HOGFISH as APT10 synonym
|
2018-05-03 11:10:21 +02:00 |
|
Deborah Servili
|
9a800ebec1
|
add Henbox
|
2018-05-03 10:57:39 +02:00 |
|
Deborah Servili
|
11f0963468
|
add Orangeworm, Kwampirs, Iron ransomware and Ton ransomware
|
2018-04-24 10:20:11 +02:00 |
|
Deborah Servili
|
6bf2004bd5
|
add Muhstik botnet
|
2018-04-23 09:26:28 +02:00 |
|
Stefan Kelm
|
0b63cb683b
|
NMCRYPT ransomware
|
2018-04-20 11:28:02 +02:00 |
|
Deborah Servili
|
f95f7b6057
|
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy
|
2018-04-20 10:27:54 +02:00 |
|
Deborah Servili
|
338eb7ab61
|
jq
|
2018-04-20 10:26:11 +02:00 |
|
Deborah Servili
|
6e2c0ea809
|
Update Ransomware galaxy version
|
2018-04-20 10:18:33 +02:00 |
|
Deborah Servili
|
f87da7a3a6
|
add Xiaoba
|
2018-04-20 10:13:52 +02:00 |
|
Deborah Servili
|
0e0c806e9e
|
Merge https://github.com/MISP/misp-galaxy
|
2018-04-19 16:04:18 +02:00 |
|
Deborah Servili
|
473bf61fc7
|
add some ransomwares
|
2018-04-19 15:00:30 +02:00 |
|
Daniel Roethlisberger
|
8c861848f8
|
Add Comnie RAT.
|
2018-04-17 15:49:05 +02:00 |
|
StefanKelm
|
74610731ee
|
Added 'Chtonic' synonym
|
2018-04-16 15:37:23 +02:00 |
|
StefanKelm
|
eff4ace398
|
Remove Chthonic since it's a duplicate (banker.json)
|
2018-04-16 15:34:59 +02:00 |
|
Deborah Servili
|
c785ee6384
|
add some ransomwares & threat actors
|
2018-04-16 09:24:11 +02:00 |
|
Deborah Servili
|
1a18ffb3eb
|
add Rovnix
|
2018-04-11 16:30:58 +02:00 |
|
Deborah Servili
|
e4b95abce3
|
add IcedID reference
|
2018-04-11 11:59:35 +02:00 |
|
Deborah Servili
|
c773597155
|
add GoScanSSH tool
|
2018-04-10 15:56:27 +02:00 |
|
Deborah Servili
|
113599bb24
|
add LockCrypt ransomware
|
2018-04-10 15:15:08 +02:00 |
|
Deborah Servili
|
a11bd66cf3
|
jq
|
2018-04-10 10:54:58 +02:00 |
|
Deborah Servili
|
ef8b428838
|
add PUBG ransomware
|
2018-04-10 10:54:36 +02:00 |
|
Deborah Servili
|
6f3921076a
|
update matrix ransomware
|
2018-04-09 15:49:11 +02:00 |
|
Deborah Servili
|
20b1508e4b
|
update version
|
2018-04-09 14:59:12 +02:00 |
|
Deborah Servili
|
e67a7b015d
|
update matrix ransomware
|
2018-04-09 14:52:07 +02:00 |
|
Deborah Servili
|
8596ff3e10
|
update threat actor galaxy based on https://www.fireeye.com/content/dam/collateral/en/mtrends-2018.pdf
|
2018-04-09 11:52:12 +02:00 |
|
Deborah Servili
|
386349c607
|
add BlackRuby& WhiteRose ransomwares (+some fix)
|
2018-04-06 12:00:57 +02:00 |
|
Deborah Servili
|
47a0fbed8c
|
merge the two Igexin clusters - fix #183
|
2018-04-05 13:47:09 +02:00 |
|
Deborah Servili
|
2bd3344eb6
|
add 2 -supposed- wipers
|
2018-04-05 11:51:13 +02:00 |
|
Deborah Servili
|
a0e8e45321
|
update ransomware galaxy versionC
|
2018-04-05 10:46:48 +02:00 |
|
Deborah Servili
|
7584c5f2a1
|
update cryptomix
|
2018-04-05 10:45:26 +02:00 |
|
Deborah Servili
|
b31f2632fd
|
update botnet version
|
2018-04-05 09:49:57 +02:00 |
|
Deborah Servili
|
73e14c53eb
|
complete hajime botnet
|
2018-04-04 16:22:50 +02:00 |
|
Deborah Servili
|
572404dcc7
|
add hajime botnet
|
2018-04-04 14:41:57 +02:00 |
|
Deborah Servili
|
a78972e0ac
|
Merge pull request #181 from Delta-Sierra/master
add external_id to values (MITRE galaxies)
|
2018-04-04 14:09:49 +02:00 |
|
Deborah Servili
|
8d4053741b
|
jq
|
2018-04-04 12:54:04 +02:00 |
|
Deborah Servili
|
804fcedb5c
|
add external_id to values
|
2018-04-03 15:53:17 +02:00 |
|
|
f4d7fe0166
|
add: SHARPKNOT
|
2018-03-29 16:31:05 +02:00 |
|
Kafeine
|
6c7d0f8684
|
+ThreadKit
|
2018-03-26 18:05:14 +01:00 |
|
Raphaël Vinot
|
24fa5b8b1b
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2018-03-23 10:40:32 +01:00 |
|
Raphaël Vinot
|
f6695f5b56
|
fix: Duplicate UUID in tools
|
2018-03-23 10:40:21 +01:00 |
|
Deborah Servili
|
0f14c2e563
|
Merge https://github.com/MISP/misp-galaxy
|
2018-03-23 08:28:20 +01:00 |
|
Deborah Servili
|
3ae0e5f113
|
add several tools
|
2018-03-23 08:27:14 +01:00 |
|
StefanKelm
|
cdf5344719
|
Update mitre-enterprise-attack-intrusion-set.json
|
2018-03-22 14:32:59 +01:00 |
|
StefanKelm
|
9add19ae7f
|
Update and rename mitre-entreprise-attack-tool.json to mitre-enterprise-attack-tool.json
|
2018-03-22 14:03:31 +01:00 |
|
StefanKelm
|
a1daa975aa
|
Update and rename mitre-entreprise-attack-relationship.json to mitre-enterprise-attack-relationship.json
|
2018-03-22 14:02:30 +01:00 |
|
StefanKelm
|
9d612ba3d9
|
Update and rename mitre-entreprise-attack-malware.json to mitre-enterprise-attack-malware.json
|
2018-03-22 14:01:27 +01:00 |
|
StefanKelm
|
b9aef43c73
|
Update and rename mitre-entreprise-attack-intrusion-set.json to mitre-enterprise-attack-intrusion-set.json
|
2018-03-22 14:00:20 +01:00 |
|
StefanKelm
|
36204644f1
|
Update mitre-enterprise-attack-course-of-action.json
|
2018-03-22 13:59:42 +01:00 |
|
StefanKelm
|
b619c8fc32
|
Update and rename mitre-entreprise-attack-course-of-action.json to mitre-enterprise-attack-course-of-action.json
|
2018-03-22 13:58:39 +01:00 |
|
StefanKelm
|
24930772c5
|
Update and rename mitre-entreprise-attack-attack-pattern.json to mitre-enterprise-attack-attack-pattern.json
|
2018-03-22 13:57:45 +01:00 |
|
Deborah Servili
|
011e0e9574
|
update Android galaxy based on: https://source.android.com/security/reports/Google_Android_Security_2017_Report_Final.pdf - possible duplicates!
|
2018-03-21 16:17:33 +01:00 |
|
Deborah Servili
|
181d4604a5
|
add Zenis ransomware
|
2018-03-21 15:22:21 +01:00 |
|
Deborah Servili
|
8cfd258ee3
|
Merge branch 'master' into master
|
2018-03-21 08:31:56 +01:00 |
|
Deborah Servili
|
510347c730
|
add gamut botnet
|
2018-03-21 08:29:41 +01:00 |
|
Kafeine
|
9e30ff1345
|
+Glazunov
|
2018-03-19 09:23:27 +00:00 |
|
Daniel Plohmann (jupiter)
|
83fd4a9af9
|
added leviathan
|
2018-03-17 11:57:10 +01:00 |
|
Dennis Rand
|
080e68a30f
|
Added RoyalCli and RoyalDNS related to APT15 based on information from NCC Group
|
2018-03-15 22:08:06 +00:00 |
|
|
468f9dcb9d
|
Merge pull request #171 from Delta-Sierra/master
add qwerty ransomware
|
2018-03-15 10:47:37 +01:00 |
|
Deborah Servili
|
2e9827d9a3
|
jq
|
2018-03-15 10:41:37 +01:00 |
|
Deborah Servili
|
37a0b96a7b
|
add qwertyransomware
|
2018-03-15 10:40:34 +01:00 |
|
eCrimeLabs
|
bfeb9d772c
|
Malware Used by APT37
Malware Used by APT37
|
2018-03-14 22:11:43 +00:00 |
|
eCrimeLabs
|
84215d0003
|
Added tools from APT37
Malware Used by APT37
|
2018-03-14 21:53:35 +00:00 |
|
Deborah Servili
|
5fa09c0962
|
update version
|
2018-03-12 11:54:29 +01:00 |
|
Deborah Servili
|
e6a703e359
|
jq
|
2018-03-12 11:53:06 +01:00 |
|
Deborah Servili
|
e3c6e7e238
|
add missing uuid
|
2018-03-12 11:52:51 +01:00 |
|
Deborah Servili
|
4aa73942e7
|
add ref for BS2005
|
2018-03-12 11:46:04 +01:00 |
|
Deborah Servili
|
73eb11fedd
|
update Mirage Threat actor
|
2018-03-12 10:44:57 +01:00 |
|
Deborah Servili
|
11daa2e1e0
|
add Nautilus, Neuron and update GandCrab
|
2018-03-12 10:23:57 +01:00 |
|
Deborah Servili
|
2fc9fb86d2
|
update GandCrab
|
2018-03-09 15:35:42 +01:00 |
|
Deborah Servili
|
ca7034a117
|
jq all the things
|
2018-03-09 14:53:31 +01:00 |
|
Deborah Servili
|
0c1e0b86b5
|
add missing uuid
|
2018-03-09 14:39:14 +01:00 |
|
Deborah Servili
|
ac8dc7122c
|
add Shipup
|
2018-03-09 14:34:14 +01:00 |
|
Deborah Servili
|
1b19f99f87
|
add ghotex
|
2018-03-09 14:29:24 +01:00 |
|
Deborah Servili
|
d2ad0f1c09
|
add miniflame
|
2018-03-09 12:20:06 +01:00 |
|
Deborah Servili
|
6096c45da5
|
add Downloader-FGO
|
2018-03-09 11:32:31 +01:00 |
|
Deborah Servili
|
a415a48d71
|
add Cheshire Cat -hack.lu video as reference!
|
2018-03-09 10:47:17 +01:00 |
|
Deborah Servili
|
0ad7f06cf6
|
add Aurora/Hydraq
|
2018-03-09 10:18:47 +01:00 |
|
Deborah Servili
|
0cfc8907f3
|
add Rotinom
|
2018-03-09 09:25:40 +01:00 |
|
Deborah Servili
|
773d764445
|
add Exforel
|
2018-03-09 09:21:32 +01:00 |
|
Deborah Servili
|
58e10c9af4
|
add RSAUtil and Coldroot
|
2018-03-07 13:00:07 +01:00 |
|
Deborah Servili
|
ee3c858e4f
|
Add TSCookie Malware and RAT
|
2018-03-06 13:28:28 +01:00 |
|
Deborah Servili
|
3f8b44bbe3
|
jq
|
2018-03-01 15:02:48 +01:00 |
|
Deborah Servili
|
227fa8b44f
|
Merge https://github.com/MISP/misp-galaxy
|
2018-03-01 15:01:49 +01:00 |
|
Deborah Servili
|
b3574f880a
|
jq ftw
|
2018-02-28 16:16:28 +01:00 |
|
Deborah Servili
|
d88a4a44dc
|
add uuid to every cluster
|
2018-02-28 15:37:37 +01:00 |
|
|
22bf4f951f
|
fix #161
|
2018-02-27 19:32:07 +01:00 |
|
Deborah Servili
|
2eea951b71
|
add extension for Thanatos ransomware
|
2018-02-27 16:23:13 +01:00 |
|
Deborah Servili
|
63f77a81ec
|
add botnets to galaxy
|
2018-02-27 16:04:23 +01:00 |
|
Deborah Servili
|
bfd74bb54d
|
add Thanatos ransomware
|
2018-02-27 15:03:26 +01:00 |
|
Deborah Servili
|
8f0e6058b8
|
Removing duplicates refs - 2
|
2018-02-23 11:49:32 +01:00 |
|
Deborah Servili
|
dd62ea1844
|
manage duplicate refs - first try
|
2018-02-23 11:44:17 +01:00 |
|
Deborah Servili
|
fd9919e67a
|
jq all the things
|
2018-02-23 08:38:32 +01:00 |
|
Deborah Servili
|
4ddb598de4
|
add MITRE Galaxies V2.0
|
2018-02-21 16:28:11 +01:00 |
|
Deborah Servili
|
384e26a1b4
|
create botnet galaxy
|
2018-02-20 15:33:24 +01:00 |
|
Deborah Servili
|
6147b89c4a
|
add ShurL0ckr ransomware
|
2018-02-20 11:19:55 +01:00 |
|
Deborah Servili
|
42596842a8
|
add synonym and ref for Emissary Panda (Iron Tiger APT)
|
2018-02-20 10:37:47 +01:00 |
|
Deborah Servili
|
aa9fe74596
|
jq
|
2018-02-19 16:35:58 +01:00 |
|
Deborah Servili
|
d3d2db7e11
|
complete gandcrab
|
2018-02-19 16:27:28 +01:00 |
|
Deborah Servili
|
289e41a35b
|
add gandcrap ransomware + update references
|
2018-02-19 15:58:47 +01:00 |
|
|
b7e8918193
|
fix: JSON format
|
2018-02-14 11:10:44 +01:00 |
|
|
db2b187bc6
|
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master
|
2018-02-14 11:06:19 +01:00 |
|
Kafeine
|
bbb76373a5
|
~Sakura description
|
2018-02-13 11:48:13 +00:00 |
|
Kafeine
|
7155477764
|
+SPL Exploit Kit, ~Grandsoft
|
2018-02-13 11:46:24 +00:00 |
|
Deborah Servili
|
3ad7e412a4
|
add Smominru
|
2018-02-01 14:29:06 +01:00 |
|
Deborah Servili
|
7d29f57d5b
|
add CrossRat
|
2018-01-31 11:14:20 +01:00 |
|
|
4664042400
|
fix: PureMasuta added to Masuta
|
2018-01-25 16:06:21 +01:00 |
|
|
3b61d2c84a
|
fix: typo in meta field
|
2018-01-25 15:56:16 +01:00 |
|
|
1831752530
|
add ref to Nexus Zeta
|
2018-01-25 15:43:33 +01:00 |
|
|
193b474ad2
|
add: Nexus Zeta is no stranger when it comes to implementing SOAP
relatedrelated exploit ;-)
|
2018-01-25 15:41:47 +01:00 |
|
|
5070314aae
|
add: Matsuta IoT botnet added
|
2018-01-25 15:39:44 +01:00 |
|
Daniel Plohmann
|
6de7c0176d
|
adding dark caracal
|
2018-01-25 12:54:50 +01:00 |
|
Kafeine
|
df47e09457
|
BlackTDS added
|
2018-01-24 14:20:50 +00:00 |
|
Deborah Servili
|
ddffa49b42
|
add Digmine
|
2018-01-15 15:45:26 +01:00 |
|
Deborah Servili
|
8c5eb9e957
|
add downAndExec
|
2018-01-15 15:00:25 +01:00 |
|
Deborah Servili
|
8c1583b962
|
add travle/PYLOT
|
2018-01-15 14:44:36 +01:00 |
|
Deborah Servili
|
8240934eb5
|
fix forgotten value Microcin
|
2018-01-11 16:01:19 +01:00 |
|
Deborah Servili
|
130ad39d4c
|
add macOS malwares
|
2018-01-11 15:19:18 +01:00 |
|
Deborah Servili
|
80d4fd0164
|
add monero miner
|
2018-01-10 15:30:47 +01:00 |
|
|
59a4fd52ad
|
fix: Updated description to clearly states that only branded vulnerabilities
|
2018-01-09 09:23:19 +01:00 |
|
Deborah Servili
|
9dd9810167
|
rename files + update README.md
|
2018-01-09 09:20:13 +01:00 |
|
Deborah Servili
|
225ce1f3ee
|
New galaxy Branded Vulnerability
|
2018-01-09 09:02:29 +01:00 |
|
|
63b72cdade
|
add in preventive measures: blacklisting phone numbers
|
2017-12-28 13:28:49 +01:00 |
|
Deborah Servili
|
9b23956c37
|
jqallthethings
|
2017-12-22 10:47:06 +01:00 |
|
Deborah Servili
|
d6b16b2177
|
update Sofacy tools
|
2017-12-22 10:46:18 +01:00 |
|
Deborah Servili
|
f737b7fe0a
|
modify SedKit description
|
2017-12-22 10:08:54 +01:00 |
|
Deborah Servili
|
e787efce72
|
add SedKit
|
2017-12-22 10:05:52 +01:00 |
|
Deborah Servili
|
51a4868a3f
|
add "Power"tools
|
2017-12-21 11:18:32 +01:00 |
|
Deborah Servili
|
56d5ab9afa
|
add satori (Mirai Variant)
|
2017-12-20 11:25:06 +01:00 |
|
Deborah Servili
|
9aa073a1c4
|
add PRILEX & CUTLET MAKER
|
2017-12-19 15:38:33 +01:00 |
|
Deborah Servili
|
eb9a49df81
|
add GratefulPOS
|
2017-12-19 12:17:42 +01:00 |
|
Deborah Servili
|
a9e5cff50f
|
update Android galaxy
|
2017-12-19 08:56:39 +01:00 |
|
Deborah Servili
|
5f731a428d
|
add source for NewCore RAT
|
2017-12-18 14:29:34 +01:00 |
|
Deborah Servili
|
db8ae5fbfe
|
update OilRig threat actor
|
2017-12-18 09:26:15 +01:00 |
|
Deborah Servili
|
91e2d56d4d
|
add file spider ransomware
|
2017-12-15 10:21:23 +01:00 |
|
Deborah Servili
|
cfaadb0c71
|
add OSX.Pirrit
|
2017-12-15 09:57:39 +01:00 |
|
|
d767e43669
|
TRISIS is the main name of TRITON as discussed in https://twitter.com/DragosInc/status/941355602512613381
|
2017-12-14 18:56:36 +01:00 |
|
|
90e37eb272
|
TRITON added
|
2017-12-14 17:13:18 +01:00 |
|
Deborah Servili
|
901d624a52
|
add SSHDoor
|
2017-12-14 11:37:05 +01:00 |
|
Deborah Servili
|
a2deaed935
|
add cryptomix variant
|
2017-12-14 10:58:29 +01:00 |
|
Deborah Servili
|
8836dfdc16
|
add Quant Loader
|
2017-12-13 15:51:24 +01:00 |
|
Deborah Servili
|
e891373ce8
|
Add MoneyTaker
|
2017-12-13 15:15:57 +01:00 |
|
Deborah Servili
|
5cac510818
|
update threat actor galaxy
|
2017-12-13 14:57:38 +01:00 |
|
Deborah Servili
|
e4d95b9ce8
|
Merge pull request #133 from Delta-Sierra/master
add source for BankBot
|
2017-12-11 10:39:31 +01:00 |
|
Deborah Servili
|
2c5a116ed5
|
add source for BankBot
|
2017-12-11 10:25:41 +01:00 |
|
|
c2e2093f29
|
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master
|
2017-12-10 10:23:37 +01:00 |
|
|
2578daabf6
|
merge conflict solved - wp-vcd added
|
2017-12-10 10:19:17 +01:00 |
|
|
5f34b618f8
|
StrongPity2 added
|
2017-12-10 09:24:32 +01:00 |
|
Deborah Servili
|
16398ed750
|
jq
|
2017-12-08 15:48:59 +01:00 |
|
Deborah Servili
|
12e0af9fa2
|
add malware/ransomwares
|
2017-12-08 15:45:44 +01:00 |
|
Deborah Servili
|
8531d4e299
|
add SLocker
|
2017-12-07 14:26:41 +01:00 |
|
Deborah Servili
|
f1b4cab10b
|
add HC7 ransomware
|
2017-12-07 11:25:08 +01:00 |
|
Deborah Servili
|
3023039956
|
add StorageCrypt Ransomware
|
2017-12-06 12:34:17 +01:00 |
|
Deborah Servili
|
d887659e51
|
add Halloware ransomware
|
2017-12-05 09:47:50 +01:00 |
|
Deborah Servili
|
c2b49e5ecd
|
update cryptomix
|
2017-12-04 12:21:21 +01:00 |
|
|
57b7b5baff
|
add: Tizi malware added
|
2017-12-03 07:33:19 +01:00 |
|
Deborah Servili
|
695d580d3c
|
add UBoatRAT
|
2017-11-29 10:09:39 +01:00 |
|
Deborah Servili
|
a46903b8dd
|
update ROKRAT
|
2017-11-28 14:01:06 +01:00 |
|
Deborah Servili
|
1cb62212ca
|
cryptomix - update
|
2017-11-22 13:46:50 +01:00 |
|
Deborah Servili
|
1bd8293901
|
add IcedID banker
|
2017-11-22 11:38:35 +01:00 |
|
Deborah Servili
|
a7d117781b
|
cryptomix - add ransomnotes
|
2017-11-21 14:24:46 +01:00 |
|
Deborah Servili
|
bd940d45ad
|
cryptomix - merge duplicates and update
|
2017-11-21 14:16:41 +01:00 |
|
Deborah Servili
|
6f79153169
|
add Ordinypt
|
2017-11-21 12:13:38 +01:00 |
|
Deborah Servili
|
ff3cb27a3b
|
jq
|
2017-11-20 12:33:47 +01:00 |
|
Deborah Servili
|
632f030b28
|
update tool galaxy
|
2017-11-20 12:32:35 +01:00 |
|
steffenenders
|
96749fd350
|
Fixed mixed up description/value for MuddyWater
|
2017-11-19 19:23:10 +01:00 |
|
Deborah Servili
|
e2dbd5a9a3
|
add MuddyWater + Update HIDDEN COBRA and update its tools
|
2017-11-17 15:41:44 +01:00 |
|
Deborah Servili
|
24e4b15156
|
add Silence Trojan
|
2017-11-14 16:20:08 +01:00 |
|
Deborah Servili
|
09bab156c7
|
update version number
|
2017-11-09 12:30:32 +01:00 |
|
Deborah Servili
|
2ed39f3cee
|
Fix typo - Spaaaace~
|
2017-11-09 09:39:45 +01:00 |
|
Deborah Servili
|
880c74f469
|
add ALMA Communicator
|
2017-11-09 09:25:16 +01:00 |
|
Deborah Servili
|
3369270bdb
|
add Sowbug group
|
2017-11-08 15:05:37 +01:00 |
|
Deborah Servili
|
5ee2001391
|
update Falismus RAT
|
2017-11-08 11:34:55 +01:00 |
|
Fredrik Borg
|
72d8bfc28a
|
fix-iso-code-3
|
2017-11-07 14:15:40 +01:00 |
|
Fredrik Borg
|
afc4972e25
|
fix iso codes
|
2017-11-07 14:04:04 +01:00 |
|
Fredrik Borg
|
53a6a8d26f
|
remove duplicate references
|
2017-11-07 13:34:44 +01:00 |
|
Siri Bromander
|
bf0d1d27ca
|
Updated with data from APT Groups and Operations
|
2017-11-07 11:07:23 +01:00 |
|
Fredrik Borg
|
26192bf39a
|
Bump version number
|
2017-11-01 18:14:20 +01:00 |
|
Fredrik Borg
|
51f86d5382
|
Use standard (2 digits) ISO codes for all countries
|
2017-11-01 12:38:21 +01:00 |
|
Raphaël Vinot
|
aa93b0e61d
|
Update banker galaxy
|
2017-10-27 11:10:26 -04:00 |
|
Raphaël Vinot
|
756af14983
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2017-10-27 10:50:58 -04:00 |
|
Raphaël Vinot
|
eef988e9ad
|
Cosmetic updates
|
2017-10-27 10:50:47 -04:00 |
|
Deborah Servili
|
7246746bbe
|
add htpRAT
|
2017-10-27 15:50:22 +02:00 |
|
Deborah Servili
|
2fefd3810d
|
add dimnie
|
2017-10-27 11:42:01 +02:00 |
|
Deborah Servili
|
ad9fff6c3f
|
Merge pull request #103 from Delta-Sierra/master
add Formbook
|
2017-10-27 10:40:00 +02:00 |
|
Deborah Servili
|
2533c1b54e
|
fix typo
|
2017-10-27 10:33:58 +02:00 |
|
Deborah Servili
|
5597e5af1c
|
add Formbook
|
2017-10-27 10:30:21 +02:00 |
|
Raphaël Vinot
|
24e7d89ac9
|
Deduplicate Android cluster
|
2017-10-26 19:00:57 -04:00 |
|
Raphaël Vinot
|
40e26a59f1
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2017-10-26 18:54:56 -04:00 |
|
Raphaël Vinot
|
6d0952e4ed
|
Add android and banker galaxies
|
2017-10-26 18:53:01 -04:00 |
|
|
aed963c52d
|
Merge pull request #102 from Delta-Sierra/master
delete x_ prefix from mitre_attack_pattern
|
2017-10-26 10:36:02 +02:00 |
|
Deborah Servili
|
709b78c2de
|
jq
|
2017-10-26 10:28:53 +02:00 |
|
Deborah Servili
|
3a41799542
|
add galaxy icon to mitre-cti tools & regenerate galaxies
|
2017-10-26 10:28:05 +02:00 |
|
Deborah Servili
|
fa8c4ec839
|
delete x_ prefix from mitre_attack_pattern
|
2017-10-26 09:44:23 +02:00 |
|
Raphaël Vinot
|
72dbbb28fa
|
Remove the executable flag from the json files, again
|
2017-10-25 12:29:16 -04:00 |
|
Raphaël Vinot
|
c6f9c5261c
|
Merge branch 'master' of github.com:MISP/misp-galaxy
|
2017-10-25 12:28:01 -04:00 |
|
Raphaël Vinot
|
196f0a7ac8
|
Remove the executable flag from the json files
|
2017-10-25 12:25:36 -04:00 |
|
Deborah Servili
|
6aee8e41fd
|
add BadRabbit ransomware
|
2017-10-25 09:28:03 +02:00 |
|
Deborah Servili
|
5b7e2de87a
|
add cert EU govsectors galaxy
|
2017-10-24 11:15:05 +02:00 |
|
|
ce0f4d5e4a
|
SOCKET23 RAT added
|
2017-10-21 15:14:42 +02:00 |
|
|
3860b1a78a
|
JadeRAT added
|
2017-10-21 13:53:40 +02:00 |
|
Deborah Servili
|
814c19841f
|
jq
|
2017-10-20 15:32:01 +02:00 |
|
Deborah Servili
|
2fd3d3221d
|
add IoT_reaper
|
2017-10-20 15:09:20 +02:00 |
|
Deborah Servili
|
a6d5383adf
|
add synonym in tool galaxy
|
2017-10-18 15:43:12 +02:00 |
|
Deborah Servili
|
aa5e823801
|
add sectors galaxy
|
2017-10-11 09:52:33 +02:00 |
|
Deborah Servili
|
fa723b6e90
|
add lukitus ransomnote to Locky
|
2017-10-04 09:32:55 +02:00 |
|
Deborah Servili
|
671d7ea456
|
add lukitus extension to Locky
|
2017-10-04 09:22:53 +02:00 |
|
Deborah Servili
|
fa5cb66a84
|
fix typo
|
2017-10-04 08:38:12 +02:00 |
|
Deborah Servili
|
13f0b95654
|
add year of apparition for Rats + fixing some typos
|
2017-10-03 16:26:58 +02:00 |
|
Deborah Servili
|
4f73184818
|
jq
|
2017-09-29 17:02:12 +02:00 |
|
Deborah Servili
|
b33014e0dd
|
add Remote Access/Administration Tools
|
2017-09-29 16:59:25 +02:00 |
|
Daniel Plohmann
|
02710714bd
|
add APT33 as identified by FireEye
|
2017-09-29 11:43:38 +02:00 |
|
Deborah Servili
|
fecfdd39f3
|
add Adwind RAT synonyms
|
2017-09-25 15:18:51 +02:00 |
|
Deborah Servili
|
38f9d2cbfd
|
Fix typo
|
2017-09-20 10:00:27 +02:00 |
|
Deborah Servili
|
c282899db7
|
add SyncCrypt Ransomwar
|
2017-09-06 15:23:27 +02:00 |
|
Deborah Servili
|
bba45c7fe6
|
add SynAck Ransomware ransomnote's name
|
2017-09-06 14:00:00 +02:00 |
|
Deborah Servili
|
5e11faaa92
|
add SynAck Ransomware
|
2017-09-06 13:45:24 +02:00 |
|
Deborah Servili
|
d07d4fbfa7
|
fix typo~
|
2017-09-06 10:04:57 +02:00 |
|