MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
535 Commits
6 Branches
47 Tags
51 MiB
Commit Graph

267 Commits (381b60890085c21bc6136fea6a9148c53c965f33)

Author SHA1 Message Date
Alexandre Dulaunoy 951ed3b9ed jq 2017-06-16 22:18:51 +02:00
Alexandre Dulaunoy 3219d5de5c Merge pull request #67 from Delta-Sierra/master 
add some rats and tools
 2017-06-16 22:18:14 +02:00
Deborah Servili 91cf7b4cee add some rats sand tools 2017-06-16 15:34:20 +02:00
David André 3dfbb7e1d0 Added Symantec alias for sofacy 2017-06-16 11:22:17 +02:00
danielplohmann 5724f19873 Merge branch 'master' into hidden-cobra-lazarus 2017-06-15 14:13:50 +02:00
Daniel Plohmann (jupiter) f7963c9a8c added Hidden Cobra as alias for Lazarus Group 2017-06-15 14:09:29 +02:00
Daniel Plohmann ff4f428bc1 added ELECTRUM to threat-actor.json (afaik not confirmed as an alias atm) 2017-06-13 13:25:16 +02:00
Daniel Plohmann 9924a8875c added PLATINUM to threat-actor.json (afaik not confirmed as an alias atm) 2017-06-13 13:21:10 +02:00
Deborah Servili e95b0fb6e1 Merge https://github.com/MISP/misp-galaxy 2017-06-09 09:06:23 +02:00
Deborah Servili 0755e11c02 update rat 2017-06-09 09:01:33 +02:00
Alexandre Dulaunoy 91663c4793 Merge pull request #58 from danielplohmann/wildneutron 
added WildNeutron (Morph, Butterfly, Sphinx Moth)
 2017-06-06 10:02:56 +02:00
Deborah Servili aa34718b13 edit threat actor - should fix #59 and #60 2017-06-06 08:40:29 +02:00
Daniel Plohmann (jupiter) 068dc40a78 added WildNeutron (Morph, Butterfly, Sphinx Moth) 2017-06-05 19:13:27 +02:00
Alexandre Dulaunoy 8796017151 Merge pull request #56 from elhoim/patch-1 
Added synonyms for APT10 and one for APT1
 2017-06-02 16:41:20 +02:00
Deborah Servili bf8c050b8b jq 2017-06-02 15:52:43 +02:00
Deborah Servili 17c0ffb255 add RAT listed in https://github.com/kevthehermit/RATDecoders 2017-06-02 15:40:06 +02:00
David André 83833f257c Added synonyms for APT10 and one for APT1 2017-06-02 10:26:45 +02:00
Deborah Servili c9ede88868 add rat galaxy 2017-05-31 16:39:19 +02:00
Alexandre Dulaunoy fab863933e SilverTerrier added 2017-05-30 08:40:26 +02:00
Alexandre Dulaunoy dcfbfdfe47 jq all 2017-05-26 14:59:34 +02:00
Alexandre Dulaunoy d95351a72a Merge branch 'master' of github.com:MISP/misp-galaxy 2017-05-26 14:52:50 +02:00
Alexandre Dulaunoy b562e6b729 Emotet/Geodo added 2017-05-26 14:52:35 +02:00
Deborah Servili 14835361f7 jq 'n ##COMMA## 2017-05-18 14:01:49 +02:00
Deborah Servili 7fee4f3a1b add Uiwik ransomware 2017-05-18 13:59:47 +02:00
Deborah Servili 3b93a773e5 add synonym and cleaning 2017-05-18 11:18:32 +02:00
Deborah Servili 2c4256f42c merge hiddentear & cryptear data 2017-05-18 10:18:45 +02:00
Deborah Servili bc4f1a93ab add synonym - half done 2017-05-18 09:19:48 +02:00
Deborah Servili 6859b2fb4e add synonym - step 1 2017-05-17 12:14:10 +02:00
Deborah Servili c501517e9a add synonym to hancitor 2017-05-17 12:00:26 +02:00
Deborah Servili 66ca4c6f2a add jaff Ransomwarejq-ed 2017-05-17 10:10:27 +02:00
Deborah Servili 44857c2ac3 add jaff Ransomware 2017-05-17 10:08:53 +02:00
Alexandre Dulaunoy 3e62608d3a Remove duplicate ref 2017-05-16 14:52:53 +02:00
Alexandre Dulaunoy e5faf4fba7 Input from Deborah incorporated 2017-05-16 14:47:16 +02:00
Alexandre Dulaunoy 5da5df6384 APT32 added 2017-05-15 09:18:28 +02:00
Alexandre Dulaunoy bd18dc2f4b WannaCry added 2017-05-14 16:37:37 +02:00
Kafeine 2182a790a3 Fix 2017-05-11 11:31:22 +01:00
Kafeine 6d90c3e691 +Bingo -- Hunter > Retired 2017-05-11 11:30:50 +01:00
Alexandre Dulaunoy 248eecaef0 Kazuar: Multiplatform Espionage Backdoor with API Access added 2017-05-04 17:22:28 +02:00
Kafeine 32b0e6f95d Update tds.json 2017-05-04 11:48:49 +01:00
Alexandre Dulaunoy f5d356523e Duplicate references removed 2017-05-03 15:59:24 +02:00
Alexandre Dulaunoy ea611bcded Merge pull request #49 from Delta-Sierra/master 
reformat ransomware galaxy
 2017-05-03 15:56:39 +02:00
Déborah Servili 9ff5f58978 add source to please the schema~ 2017-05-03 15:21:58 +02:00
Déborah Servili 0a9814d6eb change sources for authors 2017-05-03 15:15:34 +02:00
Déborah Servili 2dc6982fae jq on ransomware 2017-05-03 15:09:23 +02:00
Déborah Servili fb5eb32a0e managing duplicate 2017-05-03 15:01:20 +02:00
Déborah Servili 8b10e3aaee managing duplicate 2017-05-03 14:24:53 +02:00
Déborah Servili 24c6c51e4d reformat ransomware galaxy - including http://pastebin.com/raw/GHgpWjar 2017-05-02 14:16:21 +02:00
Déborah Servili 82f4a633c0 reformat ransomware galaxy 2017-05-02 10:00:00 +02:00
Alexandre Dulaunoy 35b94437e8 REDLEAVES malware added 2017-04-28 08:32:34 +02:00
Déborah Servili c08cc781f5 update tools 2017-04-26 12:23:57 +02:00
Alexandre Dulaunoy 3e4973f688 Feodo added 2017-04-25 19:56:06 +02:00
Déborah Servili 6267681362 add Cardinal RAT 2017-04-24 16:04:52 +02:00
Alexandre Dulaunoy 07c82e15a5 FlexiSpy 2017-04-23 23:05:12 +02:00
Alexandre Dulaunoy 52edcb1929 shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker 2017-04-15 21:22:32 +02:00
Alexandre Dulaunoy 6149740cd4 First batch of shadow broker leak (NSA name of exploit and tools) from 
https://github.com/misterch0c/shadowbroker
 2017-04-15 19:40:54 +02:00
Alexandre Dulaunoy 3595d04b35 jq all 2017-04-14 16:28:43 +02:00
Alexandre Dulaunoy fa49ca127c Merge pull request #40 from Kafeine/master 
Updated.
 2017-04-14 16:27:15 +02:00
Déborah Servili 7163e8c58c add synonyms for Da Vinci RCS 2017-04-14 15:51:39 +02:00
Déborah Servili 531595c944 ##comma## 2017-04-14 14:52:23 +02:00
Déborah Servili 54512eb840 Add some tools/threat actor 2017-04-14 14:48:39 +02:00
Kafeine 9e5db0be8c fix 2017-04-14 13:47:16 +01:00
Kafeine 321044cdac Update Terror 2017-04-14 13:46:59 +01:00
Kafeine 777fc1cde3 Updated 
Blaze <-> Terror - Updated Sundown and Nebula status
 2017-04-14 13:44:03 +01:00
Déborah Servili 9412519502 correct copypasta mistake 2017-04-12 16:11:57 +02:00
Déborah Servili bbc2b79a5e add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html 2017-04-12 16:07:48 +02:00
Déborah Servili 8a645f42c9 update tool 2017-04-11 16:06:27 +02:00
Déborah Servili 7b5aaaeff2 json fix 2017-04-11 14:18:29 +02:00
Déborah Servili eee2c6d6b5 update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html 2017-04-11 14:09:44 +02:00
Alexandre Dulaunoy bbf6716c73 Longhorn (CIA) added 2017-04-10 20:22:57 +02:00
Alexandre Dulaunoy ab5b73a3cd Sathurbot added 2017-04-06 20:49:53 +02:00
Alexandre Dulaunoy 8c09223477 The product from NSO Group Technologies added to the list of tools. 
The Pegasus name is used as synonym of Chrysaor ;-)
 2017-04-04 20:42:08 +02:00
Alexandre Dulaunoy 0578d7b7b1 The mysterious ZIRCONIUM activity group added 2017-04-03 19:44:36 +02:00
nyx0 78cdb10aae Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures 2017-03-31 09:28:50 -04:00
Alexandre Dulaunoy b3f1069686 Trochilus and MoonWind RATs added 2017-03-30 15:01:23 +02:00
Alexandre Dulaunoy f0e42a1818 KHRAT added 2017-03-29 16:37:31 +02:00
chrisdoman dbf989c742 Added descriptions and reference to threat-actor json 2017-03-22 12:52:05 +00:00
Raphaël Vinot 1ed0558c07 Merge branch 'master' into master 2017-03-16 17:38:59 +01:00
Raphaël Vinot e1b5701351 JQ all the things 2017-03-16 17:31:43 +01:00
Raphaël Vinot 0d8d265319 Fix typo. 2017-03-16 17:27:17 +01:00
CERT-Bund 4112a041f7 Added groups, joined groups, added synonyms (see extended description) 
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
 2017-03-16 17:02:55 +01:00
Alexandre Dulaunoy 71ad9099c4 IMEIJ added 2017-03-13 13:59:46 +01:00
Kafeine 73a82418df Empire status, Nebula, Blaze/Terror 2017-03-02 21:29:19 +00:00
Alexandre Dulaunoy e002e62204 missing \n at the end of the file 2017-03-01 14:55:45 +01:00
Chris Doman 9e5c983a65 Ran jq 2017-03-01 13:24:00 +00:00
Chris Doman e934f88b3b Added references 
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
 2017-03-01 12:53:52 +00:00
Alexandre Dulaunoy a224c7ce5e add: Gamaredon Group added 2017-02-28 09:17:33 +01:00
Christophe Vandeplas 048b831f53 minor correction 2017-02-27 11:00:48 +01:00
Thanat0s 07cc13feb8 remove duplicate of ratdecode import 2017-02-27 00:38:39 +01:00
Thanat0s 9eb2d097f2 add a bunch of rat from ratdecoder list 2017-02-27 00:23:56 +01:00
Thanat0s 849ca3ebbc Pimp Epic turla 2017-02-26 23:38:50 +01:00
Thanat0s f1ea577e95 pimp and agreggate turla 2017-02-26 23:24:51 +01:00
Thanat0s 3774f05237 Somes alias fetch from : https://attack.mitre.org/wiki/Groups 2017-02-26 23:07:42 +01:00
Thanat0s 2d658a6577 pimp comrat 2017-02-26 22:53:51 +01:00
Thanat0s b865342f2e pimp xneteagle 2017-02-26 22:47:16 +01:00
Thanat0s f4584f3900 pimp xscontrol 2017-02-26 22:41:51 +01:00
Thanat0s b400edbe9b Update Xagent from aptnote Bitdefender-Whitepaper-APT-Mac-A4-en-EN-web(02-23-2017) 2017-02-26 20:40:44 +01:00
Thanat0s 51eee31c21 Pimp lecna/Backspace 2017-02-26 20:16:59 +01:00
Thanat0s 0d0ba42f15 Pimp lecna/Backspace 2017-02-26 20:16:46 +01:00
Thanat0s cdc80e5596 Pimp RarStone 2017-02-26 20:02:34 +01:00
Thanat0s ca68abc0e8 Pimp Pirpi. Hard to say:) 2017-02-26 19:56:17 +01:00