MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #730 from Delta-Sierra/main 

add HelloXD ransomware
pull/733/head
Alexandre Dulaunoy 2022-07-08 14:03:15 +02:00 committed by GitHub
parent 2113761e5b 56a53433f0
commit acb2a6c913
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
clusters/ransomware.json
View File

@ -24535,7 +24535,27 @@
}, },
"uuid": "bb6d933f-7b6d-4694-853d-1ca400f6bd8f", "uuid": "bb6d933f-7b6d-4694-853d-1ca400f6bd8f",
"value": "Rook" "value": "Rook"
},
{
"description": "HelloXD is a ransomware family performing double extortion attacks that surfaced in November 2021. During our research we observed multiple variants impacting Windows and Linux systems. Unlike other ransomware groups, this ransomware family doesn’t have an active leak site; instead it prefers to direct the impacted victim to negotiations through TOX chat and onion-based messenger instances.",
"meta": {
"date": "Nov. 30, 2021",
"extensions": [
"hello"
],
"ransomnotes-filenames": [
"Hello.txt"
],
"ransomnotes-refs": [
"https://unit42.paloaltonetworks.com/wp-content/uploads/2022/06/image13.png"
],
"refs": [
"https://unit42.paloaltonetworks.com/helloxd-ransomware/"
]
},
"uuid": "5617e6fa-4e6a-4011-9385-6b1165786563",
"value": "HelloXD"
} }
], ],
"version": 102 "version": 103
} }