add SAVEfiles ransomware

2018-10-10 14:05:24 +02:00 · 2018-10-10 14:05:24 +02:00 · ec6b04cf6a
parent ed5aa150a7
commit ec6b04cf6a
1 changed files with 17 additions and 1 deletions
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@ -10598,7 +10598,23 @@
        ]
      },
      "uuid": "c49f88f6-c87d-11e8-b005-d76e8162ced5"
+    },
+    {
+      "value": "SAVEfiles",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-pushing-the-savefiles-ransomware/"
+        ],
+        "extensions": [
+          ".SAVEfiles."
+        ],
+        "ransomnotes": [
+          "!!!SAVE__FILES__INFO!!!.txt",
+          "https://www.bleepstatic.com/images/news/security/f/fallout-exploit-kit/savefiles/ransom-note-red.jpg"
+        ]
+      },
+      "uuid": "76bfb132-cc70-11e8-8623-bb3f209be6c9"
    }
  ],
-  "version": 36
+  "version": 37
 }