From 28ec6962725a350e1ab082219a478cafc7e8740d Mon Sep 17 00:00:00 2001
From: rmkml <rmkml@yahoo.fr>
Date: Sun, 1 Sep 2019 21:20:28 +0200
Subject: [PATCH] Add Buran Ransomware

---
 clusters/ransomware.json | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index bc65e8e4..1586fcd9 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13484,7 +13484,17 @@
       },
       "uuid": "6cfa554a-1e2b-115a-400f-014d671470b1",
       "value": "Nemty"
+    },
+    {
+      "description": "Buran is a new version of the Vega ransomware strain (a.k.a. Jamper, Ghost, Buhtrap) that attacked accountants from February through April 2019. The new Buran ransomware first was discovered by nao_sec in June 2019, delivered by the RIG Exploit Kit, as reported by BleepingComputer.",
+      "meta": {
+        "refs": [
+          "https://www.acronis.com/en-us/blog/posts/meet-buran-new-delphi-ransomware-delivered-rig-exploit-kit"
+        ]
+      },
+      "uuid": "6cfa554a-1e1b-114a-300f-013d671370b0",
+      "value": "Buran"
     }
   ],
-  "version": 65
+  "version": 66
 }