Merge pull request #435 from hackunagi/master

Adding Amavaldo Banking Trojan
2019-08-10 18:53:05 +02:00 · 2019-08-10 18:53:05 +02:00 · d48d2ccd3e
parent 3841447e16 d96dc39c5a
commit d48d2ccd3e
1 changed files with 11 additions and 0 deletions
--- a/clusters/rat.json
+++ b/clusters/rat.json
@ -3382,6 +3382,17 @@
      },
      "uuid": "0f117f50-9657-11e9-8e2b-83e391e0ce57",
      "value": "Felipe"
+    },
+    {
+      "description": "Amavaldo is banking trojan writen in Delphi and known to targeting Spanish or Portuguese speaking countries. It contains backdoor functionality and can work as multi stage. Amavaldo also abuses legitimate tools and softwares",
+      "meta": {
+        "date": "2019",
+        "refs": [
+          "https://www.welivesecurity.com/2019/08/01/banking-trojans-amavaldo/"
+        ]
+      },
+      "uuid": "39c65b1d-7799-43d6-a963-4a058b1c756e",
+      "value": "Amavaldo Banking Trojan"
    }
  ],
  "version": 30