MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #381 from rmkml/master 

Add Tellyouthepass Ransomware
pull/384/head
Alexandre Dulaunoy 2019-04-13 20:01:30 +02:00 committed by GitHub
parent bc0949c357 9aa6244ed9
commit 30baec12e9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 25 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
clusters/ransomware.json
View File

@ -13086,7 +13086,19 @@
}, },
"uuid": "8cfa694a-2e5b-300a-727f-027d881870b2", "uuid": "8cfa694a-2e5b-300a-727f-027d881870b2",
"value": "BlackWorm" "value": "BlackWorm"
},
{
"description": "Tellyouthepass is a ransomware that alters system files, registry entries and encodes personal photos, documents, and servers or archives. Army-grade encryption algorithms get used to change the original code of the file and make the data useless.",
"meta": {
"payment-method": "Bitcoin",
"price": "0.2",
"refs": [
"https://malware.wikia.org/wiki/Tellyouthepass"
]
},
"uuid": "7cfa694a-1e5b-300a-627f-027d881870b1",
"value": "Tellyouthepass"
} }
], ],
"version": 56 "version": 57
} }

13
clusters/stealer.json
View File

@ -65,7 +65,18 @@
}, },
"uuid": "a646edaa-4c6f-3a79-7a6c-143535259e15", "uuid": "a646edaa-4c6f-3a79-7a6c-143535259e15",
"value": "Vidar" "value": "Vidar"
},
{
"description": "Information stealer which uses AutoIT for wrapping.",
"meta": {
"date": "Jan 2019.",
"refs": [
"https://blog.yoroi.company/research/the-ave_maria-malware/"
]
},
"uuid": "a546edaa-4c6f-2a79-7a6c-133535249e14",
"value": "Ave Maria"
} }
], ],
"version": 5 "version": 6
} }