Commit graph

553 commits

Author SHA1 Message Date
Deborah Servili
5b22aa7225 add Mettle botnet 2018-05-14 12:00:22 +02:00
raw-data
0ba6233309 [ADD] RadRAT, ARS VBS Loader and FlawedAmmyy into rat.json cluster 2018-05-11 01:15:35 +01:00
Deborah Servili
5e0bd260d6 update some clusters 2018-05-09 16:12:02 +02:00
Deborah Servili
2b16c86687 add maikspy 2018-05-09 09:52:22 +02:00
Deborah Servili
d3f7f7b591 jq~ 2018-05-09 09:34:08 +02:00
Deborah Servili
360a4d4556 add reference for HNS botnet 2018-05-09 09:29:23 +02:00
Deborah Servili
0d745f6c93 add HNS bot net & HPE iLO 4 Ransomware/Wiper 2018-05-09 09:22:29 +02:00
Deborah Servili
394950379b add Kitty malware 2018-05-07 15:27:29 +02:00
Deborah Servili
1c783a1453 update version -oops- 2018-05-07 08:52:15 +02:00
Deborah Servili
9cf976b2c5 update - GandCrab v3 2018-05-07 08:46:31 +02:00
Deborah Servili
d6e4c166c5 add an unnamed ransomware 2018-05-04 15:59:37 +02:00
Deborah Servili
ba631f1b43 add spymaster pro as rat 2018-05-04 15:12:56 +02:00
Deborah Servili
58e3e5f5d6 add ZooPark campaign 2018-05-04 10:16:01 +02:00
6b1d7d2201
add: threat actors from Dragos Inc. (based on https://dragos.com/adversaries.html) 2018-05-03 21:22:09 +02:00
Deborah Servili
979c784640 jq 2018-05-03 16:08:27 +02:00
Deborah Servili
83581c62b0 add Rubella Macro Builder 2018-05-03 15:38:06 +02:00
Deborah Servili
434716df86 add GravityRAT 2018-05-03 14:35:20 +02:00
Deborah Servili
55504f93d6 add HOGFISH as APT10 synonym 2018-05-03 11:10:21 +02:00
Deborah Servili
9a800ebec1 add Henbox 2018-05-03 10:57:39 +02:00
Deborah Servili
11f0963468 add Orangeworm, Kwampirs, Iron ransomware and Ton ransomware 2018-04-24 10:20:11 +02:00
Deborah Servili
6bf2004bd5 add Muhstik botnet 2018-04-23 09:26:28 +02:00
Stefan Kelm
0b63cb683b NMCRYPT ransomware 2018-04-20 11:28:02 +02:00
Deborah Servili
f95f7b6057 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2018-04-20 10:27:54 +02:00
Deborah Servili
338eb7ab61 jq 2018-04-20 10:26:11 +02:00
Deborah Servili
6e2c0ea809
Update Ransomware galaxy version 2018-04-20 10:18:33 +02:00
Deborah Servili
f87da7a3a6 add Xiaoba 2018-04-20 10:13:52 +02:00
Deborah Servili
0e0c806e9e Merge https://github.com/MISP/misp-galaxy 2018-04-19 16:04:18 +02:00
Deborah Servili
473bf61fc7 add some ransomwares 2018-04-19 15:00:30 +02:00
Daniel Roethlisberger
8c861848f8 Add Comnie RAT. 2018-04-17 15:49:05 +02:00
StefanKelm
74610731ee
Added 'Chtonic' synonym 2018-04-16 15:37:23 +02:00
StefanKelm
eff4ace398
Remove Chthonic since it's a duplicate (banker.json) 2018-04-16 15:34:59 +02:00
Deborah Servili
c785ee6384 add some ransomwares & threat actors 2018-04-16 09:24:11 +02:00
Deborah Servili
1a18ffb3eb add Rovnix 2018-04-11 16:30:58 +02:00
Deborah Servili
e4b95abce3 add IcedID reference 2018-04-11 11:59:35 +02:00
Deborah Servili
c773597155 add GoScanSSH tool 2018-04-10 15:56:27 +02:00
Deborah Servili
113599bb24 add LockCrypt ransomware 2018-04-10 15:15:08 +02:00
Deborah Servili
a11bd66cf3 jq 2018-04-10 10:54:58 +02:00
Deborah Servili
ef8b428838 add PUBG ransomware 2018-04-10 10:54:36 +02:00
Deborah Servili
6f3921076a update matrix ransomware 2018-04-09 15:49:11 +02:00
Deborah Servili
20b1508e4b update version 2018-04-09 14:59:12 +02:00
Deborah Servili
e67a7b015d update matrix ransomware 2018-04-09 14:52:07 +02:00
Deborah Servili
8596ff3e10 update threat actor galaxy based on https://www.fireeye.com/content/dam/collateral/en/mtrends-2018.pdf 2018-04-09 11:52:12 +02:00
Deborah Servili
386349c607 add BlackRuby& WhiteRose ransomwares (+some fix) 2018-04-06 12:00:57 +02:00
Deborah Servili
47a0fbed8c merge the two Igexin clusters - fix #183 2018-04-05 13:47:09 +02:00
Deborah Servili
2bd3344eb6 add 2 -supposed- wipers 2018-04-05 11:51:13 +02:00
Deborah Servili
a0e8e45321 update ransomware galaxy versionC 2018-04-05 10:46:48 +02:00
Deborah Servili
7584c5f2a1 update cryptomix 2018-04-05 10:45:26 +02:00
Deborah Servili
b31f2632fd update botnet version 2018-04-05 09:49:57 +02:00
Deborah Servili
73e14c53eb complete hajime botnet 2018-04-04 16:22:50 +02:00
Deborah Servili
572404dcc7 add hajime botnet 2018-04-04 14:41:57 +02:00
Deborah Servili
a78972e0ac
Merge pull request #181 from Delta-Sierra/master
add external_id to values (MITRE galaxies)
2018-04-04 14:09:49 +02:00
Deborah Servili
8d4053741b jq 2018-04-04 12:54:04 +02:00
Deborah Servili
804fcedb5c add external_id to values 2018-04-03 15:53:17 +02:00
f4d7fe0166
add: SHARPKNOT 2018-03-29 16:31:05 +02:00
Kafeine
6c7d0f8684
+ThreadKit 2018-03-26 18:05:14 +01:00
Raphaël Vinot
24fa5b8b1b Merge branch 'master' of github.com:MISP/misp-galaxy 2018-03-23 10:40:32 +01:00
Raphaël Vinot
f6695f5b56 fix: Duplicate UUID in tools 2018-03-23 10:40:21 +01:00
Deborah Servili
0f14c2e563 Merge https://github.com/MISP/misp-galaxy 2018-03-23 08:28:20 +01:00
Deborah Servili
3ae0e5f113 add several tools 2018-03-23 08:27:14 +01:00
StefanKelm
cdf5344719
Update mitre-enterprise-attack-intrusion-set.json 2018-03-22 14:32:59 +01:00
StefanKelm
9add19ae7f
Update and rename mitre-entreprise-attack-tool.json to mitre-enterprise-attack-tool.json 2018-03-22 14:03:31 +01:00
StefanKelm
a1daa975aa
Update and rename mitre-entreprise-attack-relationship.json to mitre-enterprise-attack-relationship.json 2018-03-22 14:02:30 +01:00
StefanKelm
9d612ba3d9
Update and rename mitre-entreprise-attack-malware.json to mitre-enterprise-attack-malware.json 2018-03-22 14:01:27 +01:00
StefanKelm
b9aef43c73
Update and rename mitre-entreprise-attack-intrusion-set.json to mitre-enterprise-attack-intrusion-set.json 2018-03-22 14:00:20 +01:00
StefanKelm
36204644f1
Update mitre-enterprise-attack-course-of-action.json 2018-03-22 13:59:42 +01:00
StefanKelm
b619c8fc32
Update and rename mitre-entreprise-attack-course-of-action.json to mitre-enterprise-attack-course-of-action.json 2018-03-22 13:58:39 +01:00
StefanKelm
24930772c5
Update and rename mitre-entreprise-attack-attack-pattern.json to mitre-enterprise-attack-attack-pattern.json 2018-03-22 13:57:45 +01:00
Deborah Servili
011e0e9574 update Android galaxy based on: https://source.android.com/security/reports/Google_Android_Security_2017_Report_Final.pdf - possible duplicates! 2018-03-21 16:17:33 +01:00
Deborah Servili
181d4604a5 add Zenis ransomware 2018-03-21 15:22:21 +01:00
Deborah Servili
8cfd258ee3
Merge branch 'master' into master 2018-03-21 08:31:56 +01:00
Deborah Servili
510347c730 add gamut botnet 2018-03-21 08:29:41 +01:00
Kafeine
9e30ff1345
+Glazunov 2018-03-19 09:23:27 +00:00
Daniel Plohmann (jupiter)
83fd4a9af9 added leviathan 2018-03-17 11:57:10 +01:00
Dennis Rand
080e68a30f Added RoyalCli and RoyalDNS related to APT15 based on information from NCC Group 2018-03-15 22:08:06 +00:00
468f9dcb9d
Merge pull request #171 from Delta-Sierra/master
add qwerty ransomware
2018-03-15 10:47:37 +01:00
Deborah Servili
2e9827d9a3 jq 2018-03-15 10:41:37 +01:00
Deborah Servili
37a0b96a7b add qwertyransomware 2018-03-15 10:40:34 +01:00
eCrimeLabs
bfeb9d772c
Malware Used by APT37
Malware Used by APT37
2018-03-14 22:11:43 +00:00
eCrimeLabs
84215d0003
Added tools from APT37
Malware Used by APT37
2018-03-14 21:53:35 +00:00
Deborah Servili
5fa09c0962 update version 2018-03-12 11:54:29 +01:00
Deborah Servili
e6a703e359 jq 2018-03-12 11:53:06 +01:00
Deborah Servili
e3c6e7e238 add missing uuid 2018-03-12 11:52:51 +01:00
Deborah Servili
4aa73942e7 add ref for BS2005 2018-03-12 11:46:04 +01:00
Deborah Servili
73eb11fedd update Mirage Threat actor 2018-03-12 10:44:57 +01:00
Deborah Servili
11daa2e1e0 add Nautilus, Neuron and update GandCrab 2018-03-12 10:23:57 +01:00
Deborah Servili
2fc9fb86d2 update GandCrab 2018-03-09 15:35:42 +01:00
Deborah Servili
ca7034a117 jq all the things 2018-03-09 14:53:31 +01:00
Deborah Servili
0c1e0b86b5 add missing uuid 2018-03-09 14:39:14 +01:00
Deborah Servili
ac8dc7122c add Shipup 2018-03-09 14:34:14 +01:00
Deborah Servili
1b19f99f87 add ghotex 2018-03-09 14:29:24 +01:00
Deborah Servili
d2ad0f1c09 add miniflame 2018-03-09 12:20:06 +01:00
Deborah Servili
6096c45da5 add Downloader-FGO 2018-03-09 11:32:31 +01:00
Deborah Servili
a415a48d71 add Cheshire Cat -hack.lu video as reference! 2018-03-09 10:47:17 +01:00
Deborah Servili
0ad7f06cf6 add Aurora/Hydraq 2018-03-09 10:18:47 +01:00
Deborah Servili
0cfc8907f3 add Rotinom 2018-03-09 09:25:40 +01:00
Deborah Servili
773d764445 add Exforel 2018-03-09 09:21:32 +01:00
Deborah Servili
58e10c9af4 add RSAUtil and Coldroot 2018-03-07 13:00:07 +01:00
Deborah Servili
ee3c858e4f Add TSCookie Malware and RAT 2018-03-06 13:28:28 +01:00
Deborah Servili
3f8b44bbe3 jq 2018-03-01 15:02:48 +01:00
Deborah Servili
227fa8b44f Merge https://github.com/MISP/misp-galaxy 2018-03-01 15:01:49 +01:00