611 commits

Author	SHA1	Message	Date
Deborah Servili	386349c607	add BlackRuby& WhiteRose ransomwares (+some fix)	2018-04-06 12:00:57 +02:00
Deborah Servili	47a0fbed8c	merge the two Igexin clusters - fix #183	2018-04-05 13:47:09 +02:00
Deborah Servili	2bd3344eb6	add 2 -supposed- wipers	2018-04-05 11:51:13 +02:00
Deborah Servili	a0e8e45321	update ransomware galaxy versionC	2018-04-05 10:46:48 +02:00
Deborah Servili	7584c5f2a1	update cryptomix	2018-04-05 10:45:26 +02:00
Deborah Servili	b31f2632fd	update botnet version	2018-04-05 09:49:57 +02:00
Deborah Servili	73e14c53eb	complete hajime botnet	2018-04-04 16:22:50 +02:00
Deborah Servili	572404dcc7	add hajime botnet	2018-04-04 14:41:57 +02:00
Deborah Servili	a78972e0ac	Merge pull request #181 from Delta-Sierra/master ... add external_id to values (MITRE galaxies)	2018-04-04 14:09:49 +02:00
Deborah Servili	8d4053741b	jq	2018-04-04 12:54:04 +02:00
Deborah Servili	804fcedb5c	add external_id to values	2018-04-03 15:53:17 +02:00
Alexandre Dulaunoy	f4d7fe0166	add: SHARPKNOT	2018-03-29 16:31:05 +02:00
Kafeine	6c7d0f8684	+ThreadKit	2018-03-26 18:05:14 +01:00
Raphaël Vinot	24fa5b8b1b	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-03-23 10:40:32 +01:00
Raphaël Vinot	f6695f5b56	fix: Duplicate UUID in tools	2018-03-23 10:40:21 +01:00
Deborah Servili	0f14c2e563	Merge https://github.com/MISP/misp-galaxy	2018-03-23 08:28:20 +01:00
Deborah Servili	3ae0e5f113	add several tools	2018-03-23 08:27:14 +01:00
StefanKelm	cdf5344719	Update mitre-enterprise-attack-intrusion-set.json	2018-03-22 14:32:59 +01:00
StefanKelm	9add19ae7f	Update and rename mitre-entreprise-attack-tool.json to mitre-enterprise-attack-tool.json	2018-03-22 14:03:31 +01:00
StefanKelm	a1daa975aa	Update and rename mitre-entreprise-attack-relationship.json to mitre-enterprise-attack-relationship.json	2018-03-22 14:02:30 +01:00
StefanKelm	9d612ba3d9	Update and rename mitre-entreprise-attack-malware.json to mitre-enterprise-attack-malware.json	2018-03-22 14:01:27 +01:00
StefanKelm	b9aef43c73	Update and rename mitre-entreprise-attack-intrusion-set.json to mitre-enterprise-attack-intrusion-set.json	2018-03-22 14:00:20 +01:00
StefanKelm	36204644f1	Update mitre-enterprise-attack-course-of-action.json	2018-03-22 13:59:42 +01:00
StefanKelm	b619c8fc32	Update and rename mitre-entreprise-attack-course-of-action.json to mitre-enterprise-attack-course-of-action.json	2018-03-22 13:58:39 +01:00
StefanKelm	24930772c5	Update and rename mitre-entreprise-attack-attack-pattern.json to mitre-enterprise-attack-attack-pattern.json	2018-03-22 13:57:45 +01:00
Deborah Servili	011e0e9574	update Android galaxy based on: https://source.android.com/security/reports/Google_Android_Security_2017_Report_Final.pdf - possible duplicates!	2018-03-21 16:17:33 +01:00
Deborah Servili	181d4604a5	add Zenis ransomware	2018-03-21 15:22:21 +01:00
Deborah Servili	8cfd258ee3	Merge branch 'master' into master	2018-03-21 08:31:56 +01:00
Deborah Servili	510347c730	add gamut botnet	2018-03-21 08:29:41 +01:00
Kafeine	9e30ff1345	+Glazunov	2018-03-19 09:23:27 +00:00
Daniel Plohmann (jupiter)	83fd4a9af9	added leviathan	2018-03-17 11:57:10 +01:00
Dennis Rand	080e68a30f	Added RoyalCli and RoyalDNS related to APT15 based on information from NCC Group	2018-03-15 22:08:06 +00:00
Alexandre Dulaunoy	468f9dcb9d	Merge pull request #171 from Delta-Sierra/master ... add qwerty ransomware	2018-03-15 10:47:37 +01:00
Deborah Servili	2e9827d9a3	jq	2018-03-15 10:41:37 +01:00
Deborah Servili	37a0b96a7b	add qwertyransomware	2018-03-15 10:40:34 +01:00
eCrimeLabs	bfeb9d772c	Malware Used by APT37 ... Malware Used by APT37	2018-03-14 22:11:43 +00:00
eCrimeLabs	84215d0003	Added tools from APT37 ... Malware Used by APT37	2018-03-14 21:53:35 +00:00
Deborah Servili	5fa09c0962	update version	2018-03-12 11:54:29 +01:00
Deborah Servili	e6a703e359	jq	2018-03-12 11:53:06 +01:00
Deborah Servili	e3c6e7e238	add missing uuid	2018-03-12 11:52:51 +01:00
Deborah Servili	4aa73942e7	add ref for BS2005	2018-03-12 11:46:04 +01:00
Deborah Servili	73eb11fedd	update Mirage Threat actor	2018-03-12 10:44:57 +01:00
Deborah Servili	11daa2e1e0	add Nautilus, Neuron and update GandCrab	2018-03-12 10:23:57 +01:00
Deborah Servili	2fc9fb86d2	update GandCrab	2018-03-09 15:35:42 +01:00
Deborah Servili	ca7034a117	jq all the things	2018-03-09 14:53:31 +01:00
Deborah Servili	0c1e0b86b5	add missing uuid	2018-03-09 14:39:14 +01:00
Deborah Servili	ac8dc7122c	add Shipup	2018-03-09 14:34:14 +01:00
Deborah Servili	1b19f99f87	add ghotex	2018-03-09 14:29:24 +01:00
Deborah Servili	d2ad0f1c09	add miniflame	2018-03-09 12:20:06 +01:00
Deborah Servili	6096c45da5	add Downloader-FGO	2018-03-09 11:32:31 +01:00
Deborah Servili	a415a48d71	add Cheshire Cat -hack.lu video as reference!	2018-03-09 10:47:17 +01:00
Deborah Servili	0ad7f06cf6	add Aurora/Hydraq	2018-03-09 10:18:47 +01:00
Deborah Servili	0cfc8907f3	add Rotinom	2018-03-09 09:25:40 +01:00
Deborah Servili	773d764445	add Exforel	2018-03-09 09:21:32 +01:00
Deborah Servili	58e10c9af4	add RSAUtil and Coldroot	2018-03-07 13:00:07 +01:00
Deborah Servili	ee3c858e4f	Add TSCookie Malware and RAT	2018-03-06 13:28:28 +01:00
Deborah Servili	3f8b44bbe3	jq	2018-03-01 15:02:48 +01:00
Deborah Servili	227fa8b44f	Merge https://github.com/MISP/misp-galaxy	2018-03-01 15:01:49 +01:00
Deborah Servili	b3574f880a	jq ftw	2018-02-28 16:16:28 +01:00
Deborah Servili	d88a4a44dc	add uuid to every cluster	2018-02-28 15:37:37 +01:00
Alexandre Dulaunoy	22bf4f951f	fix #161	2018-02-27 19:32:07 +01:00
Deborah Servili	2eea951b71	add extension for Thanatos ransomware	2018-02-27 16:23:13 +01:00
Deborah Servili	63f77a81ec	add botnets to galaxy	2018-02-27 16:04:23 +01:00
Deborah Servili	bfd74bb54d	add Thanatos ransomware	2018-02-27 15:03:26 +01:00
Deborah Servili	8f0e6058b8	Removing duplicates refs - 2	2018-02-23 11:49:32 +01:00
Deborah Servili	dd62ea1844	manage duplicate refs - first try	2018-02-23 11:44:17 +01:00
Deborah Servili	fd9919e67a	jq all the things	2018-02-23 08:38:32 +01:00
Deborah Servili	4ddb598de4	add MITRE Galaxies V2.0	2018-02-21 16:28:11 +01:00
Deborah Servili	384e26a1b4	create botnet galaxy	2018-02-20 15:33:24 +01:00
Deborah Servili	6147b89c4a	add ShurL0ckr ransomware	2018-02-20 11:19:55 +01:00
Deborah Servili	42596842a8	add synonym and ref for Emissary Panda (Iron Tiger APT)	2018-02-20 10:37:47 +01:00
Deborah Servili	aa9fe74596	jq	2018-02-19 16:35:58 +01:00
Deborah Servili	d3d2db7e11	complete gandcrab	2018-02-19 16:27:28 +01:00
Deborah Servili	289e41a35b	add gandcrap ransomware + update references	2018-02-19 15:58:47 +01:00
Alexandre Dulaunoy	b7e8918193	fix: JSON format	2018-02-14 11:10:44 +01:00
Alexandre Dulaunoy	db2b187bc6	Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master	2018-02-14 11:06:19 +01:00
Kafeine	bbb76373a5	~Sakura description	2018-02-13 11:48:13 +00:00
Kafeine	7155477764	+SPL Exploit Kit, ~Grandsoft	2018-02-13 11:46:24 +00:00
Deborah Servili	3ad7e412a4	add Smominru	2018-02-01 14:29:06 +01:00
Deborah Servili	7d29f57d5b	add CrossRat	2018-01-31 11:14:20 +01:00
Alexandre Dulaunoy	4664042400	fix: PureMasuta added to Masuta	2018-01-25 16:06:21 +01:00
Alexandre Dulaunoy	3b61d2c84a	fix: typo in meta field	2018-01-25 15:56:16 +01:00
Alexandre Dulaunoy	1831752530	add ref to Nexus Zeta	2018-01-25 15:43:33 +01:00
Alexandre Dulaunoy	193b474ad2	add: Nexus Zeta is no stranger when it comes to implementing SOAP ... relatedrelated exploit ;-)	2018-01-25 15:41:47 +01:00
Alexandre Dulaunoy	5070314aae	add: Matsuta IoT botnet added	2018-01-25 15:39:44 +01:00
Daniel Plohmann	6de7c0176d	adding dark caracal	2018-01-25 12:54:50 +01:00
Kafeine	df47e09457	BlackTDS added	2018-01-24 14:20:50 +00:00
Deborah Servili	ddffa49b42	add Digmine	2018-01-15 15:45:26 +01:00
Deborah Servili	8c5eb9e957	add downAndExec	2018-01-15 15:00:25 +01:00
Deborah Servili	8c1583b962	add travle/PYLOT	2018-01-15 14:44:36 +01:00
Deborah Servili	8240934eb5	fix forgotten value Microcin	2018-01-11 16:01:19 +01:00
Deborah Servili	130ad39d4c	add macOS malwares	2018-01-11 15:19:18 +01:00
Deborah Servili	80d4fd0164	add monero miner	2018-01-10 15:30:47 +01:00
Alexandre Dulaunoy	59a4fd52ad	fix: Updated description to clearly states that only branded vulnerabilities	2018-01-09 09:23:19 +01:00
Deborah Servili	9dd9810167	rename files + update README.md	2018-01-09 09:20:13 +01:00
Deborah Servili	225ce1f3ee	New galaxy Branded Vulnerability	2018-01-09 09:02:29 +01:00
Alexandre Dulaunoy	63b72cdade	add in preventive measures: blacklisting phone numbers	2017-12-28 13:28:49 +01:00
Deborah Servili	9b23956c37	jqallthethings	2017-12-22 10:47:06 +01:00
Deborah Servili	d6b16b2177	update Sofacy tools	2017-12-22 10:46:18 +01:00
Deborah Servili	f737b7fe0a	modify SedKit description	2017-12-22 10:08:54 +01:00
Deborah Servili	e787efce72	add SedKit	2017-12-22 10:05:52 +01:00
Deborah Servili	51a4868a3f	add "Power"tools	2017-12-21 11:18:32 +01:00
Deborah Servili	56d5ab9afa	add satori (Mirai Variant)	2017-12-20 11:25:06 +01:00
Deborah Servili	9aa073a1c4	add PRILEX & CUTLET MAKER	2017-12-19 15:38:33 +01:00
Deborah Servili	eb9a49df81	add GratefulPOS	2017-12-19 12:17:42 +01:00
Deborah Servili	a9e5cff50f	update Android galaxy	2017-12-19 08:56:39 +01:00
Deborah Servili	5f731a428d	add source for NewCore RAT	2017-12-18 14:29:34 +01:00
Deborah Servili	db8ae5fbfe	update OilRig threat actor	2017-12-18 09:26:15 +01:00
Deborah Servili	91e2d56d4d	add file spider ransomware	2017-12-15 10:21:23 +01:00
Deborah Servili	cfaadb0c71	add OSX.Pirrit	2017-12-15 09:57:39 +01:00
Alexandre Dulaunoy	d767e43669	TRISIS is the main name of TRITON as discussed in https://twitter.com/DragosInc/status/941355602512613381	2017-12-14 18:56:36 +01:00
Alexandre Dulaunoy	90e37eb272	TRITON added	2017-12-14 17:13:18 +01:00
Deborah Servili	901d624a52	add SSHDoor	2017-12-14 11:37:05 +01:00
Deborah Servili	a2deaed935	add cryptomix variant	2017-12-14 10:58:29 +01:00
Deborah Servili	8836dfdc16	add Quant Loader	2017-12-13 15:51:24 +01:00
Deborah Servili	e891373ce8	Add MoneyTaker	2017-12-13 15:15:57 +01:00
Deborah Servili	5cac510818	update threat actor galaxy	2017-12-13 14:57:38 +01:00
Deborah Servili	e4d95b9ce8	Merge pull request #133 from Delta-Sierra/master ... add source for BankBot	2017-12-11 10:39:31 +01:00
Deborah Servili	2c5a116ed5	add source for BankBot	2017-12-11 10:25:41 +01:00
Alexandre Dulaunoy	c2e2093f29	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master	2017-12-10 10:23:37 +01:00
Alexandre Dulaunoy	2578daabf6	merge conflict solved - wp-vcd added	2017-12-10 10:19:17 +01:00
Alexandre Dulaunoy	5f34b618f8	StrongPity2 added	2017-12-10 09:24:32 +01:00
Deborah Servili	16398ed750	jq	2017-12-08 15:48:59 +01:00
Deborah Servili	12e0af9fa2	add malware/ransomwares	2017-12-08 15:45:44 +01:00
Deborah Servili	8531d4e299	add SLocker	2017-12-07 14:26:41 +01:00
Deborah Servili	f1b4cab10b	add HC7 ransomware	2017-12-07 11:25:08 +01:00
Deborah Servili	3023039956	add StorageCrypt Ransomware	2017-12-06 12:34:17 +01:00
Deborah Servili	d887659e51	add Halloware ransomware	2017-12-05 09:47:50 +01:00
Deborah Servili	c2b49e5ecd	update cryptomix	2017-12-04 12:21:21 +01:00
Alexandre Dulaunoy	57b7b5baff	add: Tizi malware added	2017-12-03 07:33:19 +01:00
Deborah Servili	695d580d3c	add UBoatRAT	2017-11-29 10:09:39 +01:00
Deborah Servili	a46903b8dd	update ROKRAT	2017-11-28 14:01:06 +01:00
Deborah Servili	1cb62212ca	cryptomix - update	2017-11-22 13:46:50 +01:00
Deborah Servili	1bd8293901	add IcedID banker	2017-11-22 11:38:35 +01:00
Deborah Servili	a7d117781b	cryptomix - add ransomnotes	2017-11-21 14:24:46 +01:00
Deborah Servili	bd940d45ad	cryptomix - merge duplicates and update	2017-11-21 14:16:41 +01:00
Deborah Servili	6f79153169	add Ordinypt	2017-11-21 12:13:38 +01:00
Deborah Servili	ff3cb27a3b	jq	2017-11-20 12:33:47 +01:00
Deborah Servili	632f030b28	update tool galaxy	2017-11-20 12:32:35 +01:00
steffenenders	96749fd350	Fixed mixed up description/value for MuddyWater	2017-11-19 19:23:10 +01:00
Deborah Servili	e2dbd5a9a3	add MuddyWater + Update HIDDEN COBRA and update its tools	2017-11-17 15:41:44 +01:00
Deborah Servili	24e4b15156	add Silence Trojan	2017-11-14 16:20:08 +01:00
Deborah Servili	09bab156c7	update version number	2017-11-09 12:30:32 +01:00
Deborah Servili	2ed39f3cee	Fix typo - Spaaaace~	2017-11-09 09:39:45 +01:00
Deborah Servili	880c74f469	add ALMA Communicator	2017-11-09 09:25:16 +01:00
Deborah Servili	3369270bdb	add Sowbug group	2017-11-08 15:05:37 +01:00
Deborah Servili	5ee2001391	update Falismus RAT	2017-11-08 11:34:55 +01:00
Fredrik Borg	72d8bfc28a	fix-iso-code-3	2017-11-07 14:15:40 +01:00
Fredrik Borg	afc4972e25	fix iso codes	2017-11-07 14:04:04 +01:00
Fredrik Borg	53a6a8d26f	remove duplicate references	2017-11-07 13:34:44 +01:00
Siri Bromander	bf0d1d27ca	Updated with data from APT Groups and Operations	2017-11-07 11:07:23 +01:00
Fredrik Borg	26192bf39a	Bump version number	2017-11-01 18:14:20 +01:00
Fredrik Borg	51f86d5382	Use standard (2 digits) ISO codes for all countries	2017-11-01 12:38:21 +01:00
Raphaël Vinot	aa93b0e61d	Update banker galaxy	2017-10-27 11:10:26 -04:00
Raphaël Vinot	756af14983	Merge branch 'master' of github.com:MISP/misp-galaxy	2017-10-27 10:50:58 -04:00
Raphaël Vinot	eef988e9ad	Cosmetic updates	2017-10-27 10:50:47 -04:00
Deborah Servili	7246746bbe	add htpRAT	2017-10-27 15:50:22 +02:00
Deborah Servili	2fefd3810d	add dimnie	2017-10-27 11:42:01 +02:00
Deborah Servili	ad9fff6c3f	Merge pull request #103 from Delta-Sierra/master ... add Formbook	2017-10-27 10:40:00 +02:00
Deborah Servili	2533c1b54e	fix typo	2017-10-27 10:33:58 +02:00
Deborah Servili	5597e5af1c	add Formbook	2017-10-27 10:30:21 +02:00
Raphaël Vinot	24e7d89ac9	Deduplicate Android cluster	2017-10-26 19:00:57 -04:00
Raphaël Vinot	40e26a59f1	Merge branch 'master' of github.com:MISP/misp-galaxy	2017-10-26 18:54:56 -04:00
Raphaël Vinot	6d0952e4ed	Add android and banker galaxies	2017-10-26 18:53:01 -04:00
Alexandre Dulaunoy	aed963c52d	Merge pull request #102 from Delta-Sierra/master ... delete x_ prefix from mitre_attack_pattern	2017-10-26 10:36:02 +02:00
Deborah Servili	709b78c2de	jq	2017-10-26 10:28:53 +02:00
Deborah Servili	3a41799542	add galaxy icon to mitre-cti tools & regenerate galaxies	2017-10-26 10:28:05 +02:00
Deborah Servili	fa8c4ec839	delete x_ prefix from mitre_attack_pattern	2017-10-26 09:44:23 +02:00
Raphaël Vinot	72dbbb28fa	Remove the executable flag from the json files, again	2017-10-25 12:29:16 -04:00
Raphaël Vinot	c6f9c5261c	Merge branch 'master' of github.com:MISP/misp-galaxy	2017-10-25 12:28:01 -04:00
Raphaël Vinot	196f0a7ac8	Remove the executable flag from the json files	2017-10-25 12:25:36 -04:00
Deborah Servili	6aee8e41fd	add BadRabbit ransomware	2017-10-25 09:28:03 +02:00
Deborah Servili	5b7e2de87a	add cert EU govsectors galaxy	2017-10-24 11:15:05 +02:00
Alexandre Dulaunoy	ce0f4d5e4a	SOCKET23 RAT added	2017-10-21 15:14:42 +02:00
Alexandre Dulaunoy	3860b1a78a	JadeRAT added	2017-10-21 13:53:40 +02:00
Deborah Servili	814c19841f	jq	2017-10-20 15:32:01 +02:00
Deborah Servili	2fd3d3221d	add IoT_reaper	2017-10-20 15:09:20 +02:00
Deborah Servili	a6d5383adf	add synonym in tool galaxy	2017-10-18 15:43:12 +02:00
Deborah Servili	aa5e823801	add sectors galaxy	2017-10-11 09:52:33 +02:00
Deborah Servili	fa723b6e90	add lukitus ransomnote to Locky	2017-10-04 09:32:55 +02:00
Deborah Servili	671d7ea456	add lukitus extension to Locky	2017-10-04 09:22:53 +02:00
Deborah Servili	fa5cb66a84	fix typo	2017-10-04 08:38:12 +02:00
Deborah Servili	13f0b95654	add year of apparition for Rats + fixing some typos	2017-10-03 16:26:58 +02:00
Deborah Servili	4f73184818	jq	2017-09-29 17:02:12 +02:00
Deborah Servili	b33014e0dd	add Remote Access/Administration Tools	2017-09-29 16:59:25 +02:00
Daniel Plohmann	02710714bd	add APT33 as identified by FireEye	2017-09-29 11:43:38 +02:00
Deborah Servili	fecfdd39f3	add Adwind RAT synonyms	2017-09-25 15:18:51 +02:00
Deborah Servili	38f9d2cbfd	Fix typo	2017-09-20 10:00:27 +02:00
Deborah Servili	c282899db7	add SyncCrypt Ransomwar	2017-09-06 15:23:27 +02:00
Deborah Servili	bba45c7fe6	add SynAck Ransomware ransomnote's name	2017-09-06 14:00:00 +02:00
Deborah Servili	5e11faaa92	add SynAck Ransomware	2017-09-06 13:45:24 +02:00
Deborah Servili	d07d4fbfa7	fix typo~	2017-09-06 10:04:57 +02:00
Deborah Servili	da5b1d2ed3	add tools and rat	2017-09-06 09:51:52 +02:00
Raphaël Vinot	568557c1af	JQ all the things.	2017-08-30 10:08:35 +02:00
Alexandre Dulaunoy	381b608900	Fixed with jq ;-)	2017-08-30 10:04:19 +02:00
Kafeine	4b94d36d2e	Merge branch 'master' into master	2017-08-29 12:41:33 +01:00
Kafeine	ee3e2b3a14	+WhiteHole +ref for Disdain	2017-08-29 10:36:38 +01:00
Deborah Servili	a2035e5840	add ransomwares	2017-08-28 11:14:27 +02:00
Deborah Servili	15ce9fb85d	add fireball malware	2017-08-24 16:10:17 +02:00
Deborah Servili	63b7e62de5	add Joao malware	2017-08-24 08:49:42 +02:00