From ac4099ed0e4c0e23146170f5b1f65e34d47fec9e Mon Sep 17 00:00:00 2001
From: rmkml <rmkml@yahoo.fr>
Date: Mon, 18 Nov 2019 23:37:21 +0100
Subject: [PATCH] Add Desync Ransomware

---
 clusters/ransomware.json | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index edd6d72..90273df 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13545,7 +13545,18 @@
       },
       "uuid": "5cea5548-1e3c-222a-3faf-022d461260b5",
       "value": "DoppelPaymer"
+    },
+    {
+      "description": "This crypto ransomware encrypts enterprise LAN data with AES (ECB mode), and then requires a ransom in # BTC to return the files.",
+      "meta": {
+        "encryption": "AES",
+        "refs": [
+          "https://id-ransomware.blogspot.com/2019/01/unnamed-desync-ransomware.html"
+        ]
+      },
+      "uuid": "6cea5546-1e2c-333a-4faf-033d461360b5",
+      "value": "Desync"
     }
   ],
-  "version": 70
+  "version": 71
 }