Commit graph

308 commits

Author SHA1 Message Date
Deborah Servili
a6d5383adf add synonym in tool galaxy 2017-10-18 15:43:12 +02:00
Deborah Servili
d07d4fbfa7 fix typo~ 2017-09-06 10:04:57 +02:00
Deborah Servili
da5b1d2ed3 add tools and rat 2017-09-06 09:51:52 +02:00
Deborah Servili
15ce9fb85d add fireball malware 2017-08-24 16:10:17 +02:00
Deborah Servili
63b7e62de5 add Joao malware 2017-08-24 08:49:42 +02:00
760f863f8a
EngineBox malware added 2017-08-19 09:38:45 +02:00
Deborah Servili
d29fb670c0 fix space typo 2017-08-16 10:50:12 +02:00
Deborah Servili
693ea7e58a type is array -shh I'm bad with the format, I know 2017-08-08 15:00:06 +02:00
Deborah Servili
6d7ec00907 type is meta 2017-08-08 12:44:37 +02:00
Deborah Servili
fa813f0f20 jq~ 2017-08-08 12:40:35 +02:00
Deborah Servili
d6a4e3a5a0 add/update tool galaxy 2017-08-08 12:37:14 +02:00
Deborah Servili
ca58a2f8b4 jq 2017-08-02 11:16:21 +02:00
Deborah Servili
8573d28493 Merge branch 'master' into master 2017-08-01 10:18:18 +02:00
Deborah Servili
c8fa7a919f try to merge 'CowerSnail added' 2017-08-01 10:04:25 +02:00
Deborah Servili
52cd886ceb add svpeng tool 2017-08-01 09:44:38 +02:00
fda915f2f6
CowerSnail added 2017-07-30 18:46:20 +02:00
Deborah Servili
497ecc396a clean tool.json 2017-07-26 09:41:08 +02:00
Deborah Servili
a6eb7338b3 adding clusters based on MISP data 2017-07-19 16:25:46 +02:00
951ed3b9ed jq 2017-06-16 22:18:51 +02:00
Deborah Servili
91cf7b4cee add some rats sand tools 2017-06-16 15:34:20 +02:00
dcfbfdfe47 jq all 2017-05-26 14:59:34 +02:00
d95351a72a Merge branch 'master' of github.com:MISP/misp-galaxy 2017-05-26 14:52:50 +02:00
b562e6b729 Emotet/Geodo added 2017-05-26 14:52:35 +02:00
Deborah Servili
c501517e9a add synonym to hancitor 2017-05-17 12:00:26 +02:00
248eecaef0 Kazuar: Multiplatform Espionage Backdoor with API Access added 2017-05-04 17:22:28 +02:00
35b94437e8 REDLEAVES malware added 2017-04-28 08:32:34 +02:00
Déborah Servili
c08cc781f5 update tools 2017-04-26 12:23:57 +02:00
3e4973f688 Feodo added 2017-04-25 19:56:06 +02:00
Déborah Servili
6267681362 add Cardinal RAT 2017-04-24 16:04:52 +02:00
07c82e15a5 FlexiSpy 2017-04-23 23:05:12 +02:00
52edcb1929 shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker 2017-04-15 21:22:32 +02:00
6149740cd4 First batch of shadow broker leak (NSA name of exploit and tools) from
https://github.com/misterch0c/shadowbroker
2017-04-15 19:40:54 +02:00
Déborah Servili
7163e8c58c add synonyms for Da Vinci RCS 2017-04-14 15:51:39 +02:00
Déborah Servili
54512eb840 Add some tools/threat actor 2017-04-14 14:48:39 +02:00
Déborah Servili
9412519502 correct copypasta mistake 2017-04-12 16:11:57 +02:00
Déborah Servili
bbc2b79a5e add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html 2017-04-12 16:07:48 +02:00
Déborah Servili
8a645f42c9 update tool 2017-04-11 16:06:27 +02:00
Déborah Servili
7b5aaaeff2 json fix 2017-04-11 14:18:29 +02:00
Déborah Servili
eee2c6d6b5 update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html 2017-04-11 14:09:44 +02:00
ab5b73a3cd Sathurbot added 2017-04-06 20:49:53 +02:00
8c09223477 The product from NSO Group Technologies added to the list of tools.
The Pegasus name is used as synonym of Chrysaor ;-)
2017-04-04 20:42:08 +02:00
b3f1069686 Trochilus and MoonWind RATs added 2017-03-30 15:01:23 +02:00
f0e42a1818 KHRAT added 2017-03-29 16:37:31 +02:00
71ad9099c4 IMEIJ added 2017-03-13 13:59:46 +01:00
Thanat0s
07cc13feb8 remove duplicate of ratdecode import 2017-02-27 00:38:39 +01:00
Thanat0s
9eb2d097f2 add a bunch of rat from ratdecoder list 2017-02-27 00:23:56 +01:00
Thanat0s
849ca3ebbc Pimp Epic turla 2017-02-26 23:38:50 +01:00
Thanat0s
f1ea577e95 pimp and agreggate turla 2017-02-26 23:24:51 +01:00
Thanat0s
2d658a6577 pimp comrat 2017-02-26 22:53:51 +01:00
Thanat0s
b865342f2e pimp xneteagle 2017-02-26 22:47:16 +01:00
Thanat0s
f4584f3900 pimp xscontrol 2017-02-26 22:41:51 +01:00
Thanat0s
b400edbe9b Update Xagent from aptnote Bitdefender-Whitepaper-APT-Mac-A4-en-EN-web(02-23-2017) 2017-02-26 20:40:44 +01:00
Thanat0s
51eee31c21 Pimp lecna/Backspace 2017-02-26 20:16:59 +01:00
Thanat0s
0d0ba42f15 Pimp lecna/Backspace 2017-02-26 20:16:46 +01:00
Thanat0s
cdc80e5596 Pimp RarStone 2017-02-26 20:02:34 +01:00
Thanat0s
ca68abc0e8 Pimp Pirpi. Hard to say:) 2017-02-26 19:56:17 +01:00
Thanat0s
6e78746a6c pimp webc2 2017-02-26 19:37:10 +01:00
Thanat0s
0775bfce62 pimp winnti 2017-02-26 19:26:21 +01:00
Thanat0s
8de827977c Pimp nettraveler 2017-02-26 19:21:41 +01:00
Thanat0s
7d62d8c3e7 cleanup zeus duplicate in alias and name 2017-02-26 17:08:43 +01:00
Thanat0s
93df12be35 update apt28 tools 2017-02-26 17:06:19 +01:00
Thanat0s
afe682cf3f Remove duplicate AlienSpy 2017-02-26 16:52:59 +01:00
Thanat0s
47903f8394 add info to the famous mimikatz 2017-02-25 02:28:43 +01:00
Thanat0s
d4e3a08995 add moudor info 2017-02-25 02:22:30 +01:00
Thanat0s
3d79a82bf5 Add Tinba banking 2017-02-25 02:08:51 +01:00
Thanat0s
7eb98609a3 udpate trojan.main 2017-02-25 01:42:33 +01:00
Thanat0s
59b5ed6c1b update evilgrab 2017-02-25 01:30:10 +01:00
Thanat0s
724e836ae9 remove coreshell duplicate 2017-02-25 01:18:03 +01:00
Thanat0s
e98de5cb5e add derusbi 2017-02-25 01:12:42 +01:00
Thanat0s
bce60b0318 merge IEchecker et sasfi 2017-02-25 01:06:19 +01:00
Thanat0s
50d2b1c871 go for caro, add hi-zor 2017-02-25 00:42:44 +01:00
Thanat0s
a29a5afbe8 update 2 array 2017-02-24 23:36:45 +01:00
Thanat0s
7265af6612 go 4 string 2017-02-24 16:24:59 +01:00
Thanat0s
b124d8a08d Follow the format 2017-02-24 15:52:08 +01:00
Thanat0s
8240e5f661 json typo 2017-02-24 14:05:57 +01:00
Thanat0s
8c2c47810e Locky removed > ransomware 2017-02-24 14:00:42 +01:00
Thanat0s
c1848b1a3a json issue 2017-02-24 13:59:14 +01:00
Thanat0s
f496c34fda generic plugx names 2017-02-24 13:57:33 +01:00
Thanat0s
bb088f97d1 Update 2017-02-24 13:56:33 +01:00
Thanat0s
0513668fcf Remove JOYRat -> team -> https://www.crowdstrike.com/blog/whois-numbered-panda/ 2017-02-24 13:46:12 +01:00
Thanat0s
796382d4ab Remove Lstudio (group using elise) , add info to PWOBOT 2017-02-24 13:39:53 +01:00
Thanat0s
c6ac4d847c Remove EK and Ransomwares 2017-02-24 13:25:38 +01:00
Thanat0s
b75e9cf59d Gutemberg on first 10 2017-02-23 10:14:18 +01:00
644e429110 PupyRAT added 2017-02-20 17:34:55 +01:00
Raphaël Vinot
7db66e05dd Strict schema, update clusters accordingly 2017-02-14 11:34:59 +01:00
Raphaël Vinot
910398fe76 Fix validation, remove duplicate. 2017-02-13 18:52:54 +01:00
5442a262ab StreamEX added 2017-02-10 10:09:37 +01:00
30d9233db6 ZeroT added 2017-02-03 22:26:40 +01:00
92bb392653 Flokibot added 2017-01-31 09:21:19 +01:00
cgi
af16b7c6a1 Adding Zeus to tools 2017-01-26 11:23:37 +01:00
8ed7374028 Tavdig was missing 2017-01-20 15:31:25 +01:00
8987006c5d LuminosityLink RAT added 2017-01-19 14:16:55 +01:00
44cc53d956 EyePyramid added 2017-01-19 08:30:46 +01:00
7a97b1bcb2 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-01-17 20:56:36 +01:00
18153f3151 GhostAdmin added 2017-01-17 20:55:27 +01:00
Déborah Servili
edea2d25ee add APT28's tools 2017-01-16 12:08:20 +01:00
7ede54c76c "the shoemaker's son always goes barefoot" Regin added 2017-01-13 08:18:41 +01:00
a42d4c4f4f Shamoon added 2017-01-11 22:46:04 +01:00
bb47f52d24
MM Core added 2017-01-08 11:23:01 +01:00
5e5a6119f5 Shiz Trojan + Shifu 2017-01-07 14:48:45 +01:00
fd030a4314 GeminiDuke added 2017-01-06 22:35:50 +01:00
8280512e5b Various updates including the addition of Chthonic Banking Trojan 2017-01-04 11:03:39 +01:00
120b2581cf DownRage added 2016-12-30 11:39:23 +01:00
0418340c21 Java RAT updated 2016-12-27 17:59:30 +01:00
a368cda3bd Seaduke added 2016-12-23 13:46:53 +01:00
55f21451cc BlackEnergy malware family added 2016-12-17 09:26:42 +01:00
d5c3312240 Mirai and BASHLITE added 2016-12-10 12:08:09 +01:00
Iglocska
65b83f7305 Added missing file 2016-12-07 07:53:24 +01:00