MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Revert "Add Maze Ransomware" 

This reverts commit cfc6e2802c.
pull/480/head
rmkml 2019-11-21 00:55:55 +01:00
parent cfc6e2802c
commit 9410326ea2
1 changed files with 1 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
clusters/ransomware.json
View File

@ -13556,20 +13556,7 @@
},
"uuid": "6cea5546-1e2c-333a-4faf-033d461360b5",
"value": "Desync"
},
{
"description": "Maze Ransomware encrypts files and makes them inaccessible while adding a custom extension containing part of the ID of the victim. The ransom note is placed inside a text file and an htm file. There are a few different extensions appended to files which are randomly generated.",
"meta": {
"encryption": "ChaCha20 and RSA",
"refs": [
"https://malpedia.caad.fkie.fraunhofer.de/details/win.maze",
"https://www.bleepingcomputer.com/news/security/maze-ransomware-now-delivered-by-spelevo-exploit-kit/",
"https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us"
]
},
"uuid": "7cea7746-1f2d-321a-3fbf-044d451350b6",
"value": "Maze"
}
],
"version": 72
"version": 71
}