195 commits

Author	SHA1	Message	Date
Deborah Servili	c8fa7a919f	try to merge 'CowerSnail added'	2017-08-01 10:04:25 +02:00
Deborah Servili	52cd886ceb	add svpeng tool	2017-08-01 09:44:38 +02:00
Alexandre Dulaunoy	fda915f2f6	CowerSnail added	2017-07-30 18:46:20 +02:00
Deborah Servili	497ecc396a	clean tool.json	2017-07-26 09:41:08 +02:00
Deborah Servili	a6eb7338b3	adding clusters based on MISP data	2017-07-19 16:25:46 +02:00
Alexandre Dulaunoy	951ed3b9ed	jq	2017-06-16 22:18:51 +02:00
Deborah Servili	91cf7b4cee	add some rats sand tools	2017-06-16 15:34:20 +02:00
Alexandre Dulaunoy	dcfbfdfe47	jq all	2017-05-26 14:59:34 +02:00
Alexandre Dulaunoy	d95351a72a	Merge branch 'master' of github.com:MISP/misp-galaxy	2017-05-26 14:52:50 +02:00
Alexandre Dulaunoy	b562e6b729	Emotet/Geodo added	2017-05-26 14:52:35 +02:00
Deborah Servili	c501517e9a	add synonym to hancitor	2017-05-17 12:00:26 +02:00
Alexandre Dulaunoy	248eecaef0	Kazuar: Multiplatform Espionage Backdoor with API Access added	2017-05-04 17:22:28 +02:00
Alexandre Dulaunoy	35b94437e8	REDLEAVES malware added	2017-04-28 08:32:34 +02:00
Déborah Servili	c08cc781f5	update tools	2017-04-26 12:23:57 +02:00
Alexandre Dulaunoy	3e4973f688	Feodo added	2017-04-25 19:56:06 +02:00
Déborah Servili	6267681362	add Cardinal RAT	2017-04-24 16:04:52 +02:00
Alexandre Dulaunoy	07c82e15a5	FlexiSpy	2017-04-23 23:05:12 +02:00
Alexandre Dulaunoy	52edcb1929	shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker	2017-04-15 21:22:32 +02:00
Alexandre Dulaunoy	6149740cd4	First batch of shadow broker leak (NSA name of exploit and tools) from ... https://github.com/misterch0c/shadowbroker	2017-04-15 19:40:54 +02:00
Déborah Servili	7163e8c58c	add synonyms for Da Vinci RCS	2017-04-14 15:51:39 +02:00
Déborah Servili	54512eb840	Add some tools/threat actor	2017-04-14 14:48:39 +02:00
Déborah Servili	9412519502	correct copypasta mistake	2017-04-12 16:11:57 +02:00
Déborah Servili	bbc2b79a5e	add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html	2017-04-12 16:07:48 +02:00
Déborah Servili	8a645f42c9	update tool	2017-04-11 16:06:27 +02:00
Déborah Servili	7b5aaaeff2	json fix	2017-04-11 14:18:29 +02:00
Déborah Servili	eee2c6d6b5	update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html	2017-04-11 14:09:44 +02:00
Alexandre Dulaunoy	ab5b73a3cd	Sathurbot added	2017-04-06 20:49:53 +02:00
Alexandre Dulaunoy	8c09223477	The product from NSO Group Technologies added to the list of tools. ... The Pegasus name is used as synonym of Chrysaor ;-)	2017-04-04 20:42:08 +02:00
Alexandre Dulaunoy	b3f1069686	Trochilus and MoonWind RATs added	2017-03-30 15:01:23 +02:00
Alexandre Dulaunoy	f0e42a1818	KHRAT added	2017-03-29 16:37:31 +02:00
Alexandre Dulaunoy	71ad9099c4	IMEIJ added	2017-03-13 13:59:46 +01:00
Thanat0s	07cc13feb8	remove duplicate of ratdecode import	2017-02-27 00:38:39 +01:00
Thanat0s	9eb2d097f2	add a bunch of rat from ratdecoder list	2017-02-27 00:23:56 +01:00
Thanat0s	849ca3ebbc	Pimp Epic turla	2017-02-26 23:38:50 +01:00
Thanat0s	f1ea577e95	pimp and agreggate turla	2017-02-26 23:24:51 +01:00
Thanat0s	2d658a6577	pimp comrat	2017-02-26 22:53:51 +01:00
Thanat0s	b865342f2e	pimp xneteagle	2017-02-26 22:47:16 +01:00
Thanat0s	f4584f3900	pimp xscontrol	2017-02-26 22:41:51 +01:00
Thanat0s	b400edbe9b	Update Xagent from aptnote Bitdefender-Whitepaper-APT-Mac-A4-en-EN-web(02-23-2017)	2017-02-26 20:40:44 +01:00
Thanat0s	51eee31c21	Pimp lecna/Backspace	2017-02-26 20:16:59 +01:00
Thanat0s	0d0ba42f15	Pimp lecna/Backspace	2017-02-26 20:16:46 +01:00
Thanat0s	cdc80e5596	Pimp RarStone	2017-02-26 20:02:34 +01:00
Thanat0s	ca68abc0e8	Pimp Pirpi. Hard to say:)	2017-02-26 19:56:17 +01:00
Thanat0s	6e78746a6c	pimp webc2	2017-02-26 19:37:10 +01:00
Thanat0s	0775bfce62	pimp winnti	2017-02-26 19:26:21 +01:00
Thanat0s	8de827977c	Pimp nettraveler	2017-02-26 19:21:41 +01:00
Thanat0s	7d62d8c3e7	cleanup zeus duplicate in alias and name	2017-02-26 17:08:43 +01:00
Thanat0s	93df12be35	update apt28 tools	2017-02-26 17:06:19 +01:00
Thanat0s	afe682cf3f	Remove duplicate AlienSpy	2017-02-26 16:52:59 +01:00
Thanat0s	47903f8394	add info to the famous mimikatz	2017-02-25 02:28:43 +01:00
Thanat0s	d4e3a08995	add moudor info	2017-02-25 02:22:30 +01:00
Thanat0s	3d79a82bf5	Add Tinba banking	2017-02-25 02:08:51 +01:00
Thanat0s	7eb98609a3	udpate trojan.main	2017-02-25 01:42:33 +01:00
Thanat0s	59b5ed6c1b	update evilgrab	2017-02-25 01:30:10 +01:00
Thanat0s	724e836ae9	remove coreshell duplicate	2017-02-25 01:18:03 +01:00
Thanat0s	e98de5cb5e	add derusbi	2017-02-25 01:12:42 +01:00
Thanat0s	bce60b0318	merge IEchecker et sasfi	2017-02-25 01:06:19 +01:00
Thanat0s	50d2b1c871	go for caro, add hi-zor	2017-02-25 00:42:44 +01:00
Thanat0s	a29a5afbe8	update 2 array	2017-02-24 23:36:45 +01:00
Thanat0s	7265af6612	go 4 string	2017-02-24 16:24:59 +01:00
Thanat0s	b124d8a08d	Follow the format	2017-02-24 15:52:08 +01:00
Thanat0s	8240e5f661	json typo	2017-02-24 14:05:57 +01:00
Thanat0s	8c2c47810e	Locky removed > ransomware	2017-02-24 14:00:42 +01:00
Thanat0s	c1848b1a3a	json issue	2017-02-24 13:59:14 +01:00
Thanat0s	f496c34fda	generic plugx names	2017-02-24 13:57:33 +01:00
Thanat0s	bb088f97d1	Update	2017-02-24 13:56:33 +01:00
Thanat0s	0513668fcf	Remove JOYRat -> team -> https://www.crowdstrike.com/blog/whois-numbered-panda/	2017-02-24 13:46:12 +01:00
Thanat0s	796382d4ab	Remove Lstudio (group using elise) , add info to PWOBOT	2017-02-24 13:39:53 +01:00
Thanat0s	c6ac4d847c	Remove EK and Ransomwares	2017-02-24 13:25:38 +01:00
Thanat0s	b75e9cf59d	Gutemberg on first 10	2017-02-23 10:14:18 +01:00
Alexandre Dulaunoy	644e429110	PupyRAT added	2017-02-20 17:34:55 +01:00
Raphaël Vinot	7db66e05dd	Strict schema, update clusters accordingly	2017-02-14 11:34:59 +01:00
Raphaël Vinot	910398fe76	Fix validation, remove duplicate.	2017-02-13 18:52:54 +01:00
Alexandre Dulaunoy	5442a262ab	StreamEX added	2017-02-10 10:09:37 +01:00
Alexandre Dulaunoy	30d9233db6	ZeroT added	2017-02-03 22:26:40 +01:00
Alexandre Dulaunoy	92bb392653	Flokibot added	2017-01-31 09:21:19 +01:00
cgi	af16b7c6a1	Adding Zeus to tools	2017-01-26 11:23:37 +01:00
Alexandre Dulaunoy	8ed7374028	Tavdig was missing	2017-01-20 15:31:25 +01:00
Alexandre Dulaunoy	8987006c5d	LuminosityLink RAT added	2017-01-19 14:16:55 +01:00
Alexandre Dulaunoy	44cc53d956	EyePyramid added	2017-01-19 08:30:46 +01:00
Alexandre Dulaunoy	7a97b1bcb2	Merge branch 'master' of github.com:MISP/misp-galaxy	2017-01-17 20:56:36 +01:00
Alexandre Dulaunoy	18153f3151	GhostAdmin added	2017-01-17 20:55:27 +01:00
Déborah Servili	edea2d25ee	add APT28's tools	2017-01-16 12:08:20 +01:00
Alexandre Dulaunoy	7ede54c76c	"the shoemaker's son always goes barefoot" Regin added	2017-01-13 08:18:41 +01:00
Alexandre Dulaunoy	a42d4c4f4f	Shamoon added	2017-01-11 22:46:04 +01:00
Alexandre Dulaunoy	bb47f52d24	MM Core added	2017-01-08 11:23:01 +01:00
Alexandre Dulaunoy	5e5a6119f5	Shiz Trojan + Shifu	2017-01-07 14:48:45 +01:00
Alexandre Dulaunoy	fd030a4314	GeminiDuke added	2017-01-06 22:35:50 +01:00
Alexandre Dulaunoy	8280512e5b	Various updates including the addition of Chthonic Banking Trojan	2017-01-04 11:03:39 +01:00
Alexandre Dulaunoy	120b2581cf	DownRage added	2016-12-30 11:39:23 +01:00
Alexandre Dulaunoy	0418340c21	Java RAT updated	2016-12-27 17:59:30 +01:00
Alexandre Dulaunoy	a368cda3bd	Seaduke added	2016-12-23 13:46:53 +01:00
Alexandre Dulaunoy	55f21451cc	BlackEnergy malware family added	2016-12-17 09:26:42 +01:00
Alexandre Dulaunoy	d5c3312240	Mirai and BASHLITE added	2016-12-10 12:08:09 +01:00
Iglocska	65b83f7305	Added missing file	2016-12-07 07:53:24 +01:00