update evilgrab

2017-02-25 01:30:10 +01:00 · 2017-02-25 01:30:10 +01:00 · 59b5ed6c1b
parent 724e836ae9
commit 59b5ed6c1b
1 changed files with 16 additions and 1 deletions
--- a/clusters/tool.json
+++ b/clusters/tool.json
@ -281,7 +281,22 @@
      }
    },
    {
-      "value": "EvilGrab"
+      "value": "EvilGrab",
+      "meta": {
+        "synonyms": [
+          "BKDR_HGDER",
+          "BKDR_EVILOGE",
+          "BKDR_NVICM",
+          "Wmonder"
+        ],
+        "refs": [
+          "http://blog.trendmicro.com/trendlabs-security-intelligence/evilgrab-malware-family-used-in-targeted-attacks-in-asia/",
+          "http://researchcenter.paloaltonetworks.com/2015/06/evilgrab-delivered-by-watering-hole-attack-on-president-of-myanmars-website/"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
    },
    {
      "value": "Trojan.Naid"