MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
899 Commits
6 Branches
47 Tags
73 MiB
Commit Graph

484 Commits (55504f93d6db2970c1ecb9190de8c44fd1bb7936)

Author SHA1 Message Date
Kafeine 7155477764
+SPL Exploit Kit, ~Grandsoft 2018-02-13 11:46:24 +00:00
Deborah Servili 3ad7e412a4 add Smominru 2018-02-01 14:29:06 +01:00
Deborah Servili 7d29f57d5b add CrossRat 2018-01-31 11:14:20 +01:00
Alexandre Dulaunoy 4664042400
fix: PureMasuta added to Masuta 2018-01-25 16:06:21 +01:00
Alexandre Dulaunoy 3b61d2c84a
fix: typo in meta field 2018-01-25 15:56:16 +01:00
Alexandre Dulaunoy 1831752530
add ref to Nexus Zeta 2018-01-25 15:43:33 +01:00
Alexandre Dulaunoy 193b474ad2
add: Nexus Zeta is no stranger when it comes to implementing SOAP 
relatedrelated exploit ;-)
 2018-01-25 15:41:47 +01:00
Alexandre Dulaunoy 5070314aae
add: Matsuta IoT botnet added 2018-01-25 15:39:44 +01:00
Daniel Plohmann 6de7c0176d adding dark caracal 2018-01-25 12:54:50 +01:00
Kafeine df47e09457
BlackTDS added 2018-01-24 14:20:50 +00:00
Deborah Servili ddffa49b42 add Digmine 2018-01-15 15:45:26 +01:00
Deborah Servili 8c5eb9e957 add downAndExec 2018-01-15 15:00:25 +01:00
Deborah Servili 8c1583b962 add travle/PYLOT 2018-01-15 14:44:36 +01:00
Deborah Servili 8240934eb5 fix forgotten value Microcin 2018-01-11 16:01:19 +01:00
Deborah Servili 130ad39d4c add macOS malwares 2018-01-11 15:19:18 +01:00
Deborah Servili 80d4fd0164 add monero miner 2018-01-10 15:30:47 +01:00
Alexandre Dulaunoy 59a4fd52ad
fix: Updated description to clearly states that only branded vulnerabilities 2018-01-09 09:23:19 +01:00
Deborah Servili 9dd9810167 rename files + update README.md 2018-01-09 09:20:13 +01:00
Deborah Servili 225ce1f3ee New galaxy Branded Vulnerability 2018-01-09 09:02:29 +01:00
Alexandre Dulaunoy 63b72cdade
add in preventive measures: blacklisting phone numbers 2017-12-28 13:28:49 +01:00
Deborah Servili 9b23956c37 jqallthethings 2017-12-22 10:47:06 +01:00
Deborah Servili d6b16b2177 update Sofacy tools 2017-12-22 10:46:18 +01:00
Deborah Servili f737b7fe0a modify SedKit description 2017-12-22 10:08:54 +01:00
Deborah Servili e787efce72 add SedKit 2017-12-22 10:05:52 +01:00
Deborah Servili 51a4868a3f add "Power"tools 2017-12-21 11:18:32 +01:00
Deborah Servili 56d5ab9afa add satori (Mirai Variant) 2017-12-20 11:25:06 +01:00
Deborah Servili 9aa073a1c4 add PRILEX & CUTLET MAKER 2017-12-19 15:38:33 +01:00
Deborah Servili eb9a49df81 add GratefulPOS 2017-12-19 12:17:42 +01:00
Deborah Servili a9e5cff50f update Android galaxy 2017-12-19 08:56:39 +01:00
Deborah Servili 5f731a428d add source for NewCore RAT 2017-12-18 14:29:34 +01:00
Deborah Servili db8ae5fbfe update OilRig threat actor 2017-12-18 09:26:15 +01:00
Deborah Servili 91e2d56d4d add file spider ransomware 2017-12-15 10:21:23 +01:00
Deborah Servili cfaadb0c71 add OSX.Pirrit 2017-12-15 09:57:39 +01:00
Alexandre Dulaunoy d767e43669
TRISIS is the main name of TRITON as discussed in https://twitter.com/DragosInc/status/941355602512613381 2017-12-14 18:56:36 +01:00
Alexandre Dulaunoy 90e37eb272
TRITON added 2017-12-14 17:13:18 +01:00
Deborah Servili 901d624a52 add SSHDoor 2017-12-14 11:37:05 +01:00
Deborah Servili a2deaed935 add cryptomix variant 2017-12-14 10:58:29 +01:00
Deborah Servili 8836dfdc16 add Quant Loader 2017-12-13 15:51:24 +01:00
Deborah Servili e891373ce8 Add MoneyTaker 2017-12-13 15:15:57 +01:00
Deborah Servili 5cac510818 update threat actor galaxy 2017-12-13 14:57:38 +01:00
Deborah Servili e4d95b9ce8
Merge pull request #133 from Delta-Sierra/master 
add source for BankBot
 2017-12-11 10:39:31 +01:00
Deborah Servili 2c5a116ed5 add source for BankBot 2017-12-11 10:25:41 +01:00
Alexandre Dulaunoy c2e2093f29
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2017-12-10 10:23:37 +01:00
Alexandre Dulaunoy 2578daabf6
merge conflict solved - wp-vcd added 2017-12-10 10:19:17 +01:00
Alexandre Dulaunoy 5f34b618f8
StrongPity2 added 2017-12-10 09:24:32 +01:00
Deborah Servili 16398ed750 jq 2017-12-08 15:48:59 +01:00
Deborah Servili 12e0af9fa2 add malware/ransomwares 2017-12-08 15:45:44 +01:00
Deborah Servili 8531d4e299 add SLocker 2017-12-07 14:26:41 +01:00
Deborah Servili f1b4cab10b add HC7 ransomware 2017-12-07 11:25:08 +01:00
Deborah Servili 3023039956 add StorageCrypt Ransomware 2017-12-06 12:34:17 +01:00
Deborah Servili d887659e51 add Halloware ransomware 2017-12-05 09:47:50 +01:00
Deborah Servili c2b49e5ecd update cryptomix 2017-12-04 12:21:21 +01:00
Alexandre Dulaunoy 57b7b5baff
add: Tizi malware added 2017-12-03 07:33:19 +01:00
Deborah Servili 695d580d3c add UBoatRAT 2017-11-29 10:09:39 +01:00
Deborah Servili a46903b8dd update ROKRAT 2017-11-28 14:01:06 +01:00
Deborah Servili 1cb62212ca cryptomix - update 2017-11-22 13:46:50 +01:00
Deborah Servili 1bd8293901 add IcedID banker 2017-11-22 11:38:35 +01:00
Deborah Servili a7d117781b cryptomix - add ransomnotes 2017-11-21 14:24:46 +01:00
Deborah Servili bd940d45ad cryptomix - merge duplicates and update 2017-11-21 14:16:41 +01:00
Deborah Servili 6f79153169 add Ordinypt 2017-11-21 12:13:38 +01:00
Deborah Servili ff3cb27a3b jq 2017-11-20 12:33:47 +01:00
Deborah Servili 632f030b28 update tool galaxy 2017-11-20 12:32:35 +01:00
steffenenders 96749fd350
Fixed mixed up description/value for MuddyWater 2017-11-19 19:23:10 +01:00
Deborah Servili e2dbd5a9a3 add MuddyWater + Update HIDDEN COBRA and update its tools 2017-11-17 15:41:44 +01:00
Deborah Servili 24e4b15156 add Silence Trojan 2017-11-14 16:20:08 +01:00
Deborah Servili 09bab156c7 update version number 2017-11-09 12:30:32 +01:00
Deborah Servili 2ed39f3cee Fix typo - Spaaaace~ 2017-11-09 09:39:45 +01:00
Deborah Servili 880c74f469 add ALMA Communicator 2017-11-09 09:25:16 +01:00
Deborah Servili 3369270bdb add Sowbug group 2017-11-08 15:05:37 +01:00
Deborah Servili 5ee2001391 update Falismus RAT 2017-11-08 11:34:55 +01:00
Fredrik Borg 72d8bfc28a fix-iso-code-3 2017-11-07 14:15:40 +01:00
Fredrik Borg afc4972e25 fix iso codes 2017-11-07 14:04:04 +01:00
Fredrik Borg 53a6a8d26f remove duplicate references 2017-11-07 13:34:44 +01:00
Siri Bromander bf0d1d27ca Updated with data from APT Groups and Operations 2017-11-07 11:07:23 +01:00
Fredrik Borg 26192bf39a Bump version number 2017-11-01 18:14:20 +01:00
Fredrik Borg 51f86d5382 Use standard (2 digits) ISO codes for all countries 2017-11-01 12:38:21 +01:00
Raphaël Vinot aa93b0e61d Update banker galaxy 2017-10-27 11:10:26 -04:00
Raphaël Vinot 756af14983 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-10-27 10:50:58 -04:00
Raphaël Vinot eef988e9ad Cosmetic updates 2017-10-27 10:50:47 -04:00
Deborah Servili 7246746bbe add htpRAT 2017-10-27 15:50:22 +02:00
Deborah Servili 2fefd3810d add dimnie 2017-10-27 11:42:01 +02:00
Deborah Servili ad9fff6c3f Merge pull request #103 from Delta-Sierra/master 
add Formbook
 2017-10-27 10:40:00 +02:00
Deborah Servili 2533c1b54e fix typo 2017-10-27 10:33:58 +02:00
Deborah Servili 5597e5af1c add Formbook 2017-10-27 10:30:21 +02:00
Raphaël Vinot 24e7d89ac9 Deduplicate Android cluster 2017-10-26 19:00:57 -04:00
Raphaël Vinot 40e26a59f1 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-10-26 18:54:56 -04:00
Raphaël Vinot 6d0952e4ed Add android and banker galaxies 2017-10-26 18:53:01 -04:00
Alexandre Dulaunoy aed963c52d Merge pull request #102 from Delta-Sierra/master 
delete x_ prefix from mitre_attack_pattern
 2017-10-26 10:36:02 +02:00
Deborah Servili 709b78c2de jq 2017-10-26 10:28:53 +02:00
Deborah Servili 3a41799542 add galaxy icon to mitre-cti tools & regenerate galaxies 2017-10-26 10:28:05 +02:00
Deborah Servili fa8c4ec839 delete x_ prefix from mitre_attack_pattern 2017-10-26 09:44:23 +02:00
Raphaël Vinot 72dbbb28fa Remove the executable flag from the json files, again 2017-10-25 12:29:16 -04:00
Raphaël Vinot c6f9c5261c Merge branch 'master' of github.com:MISP/misp-galaxy 2017-10-25 12:28:01 -04:00
Raphaël Vinot 196f0a7ac8 Remove the executable flag from the json files 2017-10-25 12:25:36 -04:00
Deborah Servili 6aee8e41fd add BadRabbit ransomware 2017-10-25 09:28:03 +02:00
Deborah Servili 5b7e2de87a add cert EU govsectors galaxy 2017-10-24 11:15:05 +02:00
Alexandre Dulaunoy ce0f4d5e4a
SOCKET23 RAT added 2017-10-21 15:14:42 +02:00
Alexandre Dulaunoy 3860b1a78a
JadeRAT added 2017-10-21 13:53:40 +02:00
Deborah Servili 814c19841f jq 2017-10-20 15:32:01 +02:00
Deborah Servili 2fd3d3221d add IoT_reaper 2017-10-20 15:09:20 +02:00
Deborah Servili a6d5383adf add synonym in tool galaxy 2017-10-18 15:43:12 +02:00
Deborah Servili aa5e823801 add sectors galaxy 2017-10-11 09:52:33 +02:00
Deborah Servili fa723b6e90 add lukitus ransomnote to Locky 2017-10-04 09:32:55 +02:00
Deborah Servili 671d7ea456 add lukitus extension to Locky 2017-10-04 09:22:53 +02:00
Deborah Servili fa5cb66a84 fix typo 2017-10-04 08:38:12 +02:00
Deborah Servili 13f0b95654 add year of apparition for Rats + fixing some typos 2017-10-03 16:26:58 +02:00
Deborah Servili 4f73184818 jq 2017-09-29 17:02:12 +02:00
Deborah Servili b33014e0dd add Remote Access/Administration Tools 2017-09-29 16:59:25 +02:00
Daniel Plohmann 02710714bd add APT33 as identified by FireEye 2017-09-29 11:43:38 +02:00
Deborah Servili fecfdd39f3 add Adwind RAT synonyms 2017-09-25 15:18:51 +02:00
Deborah Servili 38f9d2cbfd Fix typo 2017-09-20 10:00:27 +02:00
Deborah Servili c282899db7 add SyncCrypt Ransomwar 2017-09-06 15:23:27 +02:00
Deborah Servili bba45c7fe6 add SynAck Ransomware ransomnote's name 2017-09-06 14:00:00 +02:00
Deborah Servili 5e11faaa92 add SynAck Ransomware 2017-09-06 13:45:24 +02:00
Deborah Servili d07d4fbfa7 fix typo~ 2017-09-06 10:04:57 +02:00
Deborah Servili da5b1d2ed3 add tools and rat 2017-09-06 09:51:52 +02:00
Raphaël Vinot 568557c1af JQ all the things. 2017-08-30 10:08:35 +02:00
Alexandre Dulaunoy 381b608900
Fixed with jq ;-) 2017-08-30 10:04:19 +02:00
Kafeine 4b94d36d2e Merge branch 'master' into master 2017-08-29 12:41:33 +01:00
Kafeine ee3e2b3a14 +WhiteHole +ref for Disdain 2017-08-29 10:36:38 +01:00
Deborah Servili a2035e5840 add ransomwares 2017-08-28 11:14:27 +02:00
Deborah Servili 15ce9fb85d add fireball malware 2017-08-24 16:10:17 +02:00
Deborah Servili 63b7e62de5 add Joao malware 2017-08-24 08:49:42 +02:00
Alexandre Dulaunoy 760f863f8a
EngineBox malware added 2017-08-19 09:38:45 +02:00
Deborah Servili ad22bafdba jq 2017-08-17 15:54:44 +02:00
Deborah Servili 91cd3a6eec update mitre galaxies 2017-08-17 15:53:41 +02:00
iglocska cf780290be Fixed some issues with a misnamed galaxy 2017-08-16 21:40:05 +02:00
Deborah Servili 7e391e8a39 version is integer 2017-08-16 15:23:58 +02:00
Deborah Servili 7cb372bdb5 put uuid as meta 2017-08-16 15:13:18 +02:00
Deborah Servili 447bfe93f3 new generation of mitre galaxies 2017-08-16 12:37:07 +02:00
Deborah Servili fb5560f927 add mitre based galaxies 2017-08-16 12:17:00 +02:00
Deborah Servili d29fb670c0 fix space typo 2017-08-16 10:50:12 +02:00
Kafeine bde18d917f +disdain+captainblack-Neutrino 2017-08-15 20:53:41 +02:00
Deborah Servili 693ea7e58a type is array -shh I'm bad with the format, I know 2017-08-08 15:00:06 +02:00
Deborah Servili 6d7ec00907 type is meta 2017-08-08 12:44:37 +02:00
Deborah Servili fa813f0f20 jq~ 2017-08-08 12:40:35 +02:00
Deborah Servili d6a4e3a5a0 add/update tool galaxy 2017-08-08 12:37:14 +02:00
Deborah Servili 4482e198a0 add GlobeImposter synonym 2017-08-08 08:50:36 +02:00
Raphaël Vinot 3b7ad8ea8c Merge pull request #75 from Delta-Sierra/master 
add svpeng tool
 2017-08-02 11:21:24 +02:00
Deborah Servili ca58a2f8b4 jq 2017-08-02 11:16:21 +02:00
Daniel Plohmann 355a230182 added FIN7 as alias for anunak 2017-08-01 13:29:57 +02:00
Daniel Plohmann b4e49823dd merged barium into axiom (only one redundant reference given) 2017-08-01 13:13:56 +02:00
Deborah Servili 8573d28493 Merge branch 'master' into master 2017-08-01 10:18:18 +02:00
Deborah Servili c8fa7a919f try to merge 'CowerSnail added' 2017-08-01 10:04:25 +02:00
Deborah Servili 52cd886ceb add svpeng tool 2017-08-01 09:44:38 +02:00
Alexandre Dulaunoy fda915f2f6
CowerSnail added 2017-07-30 18:46:20 +02:00
Raphaël Vinot 81d304345f Remove duplicates 2017-07-26 14:57:14 +02:00
Raphaël Vinot 282c3a8101 Merge pull request #74 from Delta-Sierra/master 
adding clusters based on MISP data
 2017-07-26 11:41:00 +02:00
Deborah Servili 497ecc396a clean tool.json 2017-07-26 09:41:08 +02:00
Deborah Servili 7e59f14dca update Spring Dragon threat actor 2017-07-26 09:21:36 +02:00