MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
1,707 Commits
6 Branches
47 Tags
57 MiB
Commit Graph

1087 Commits (6ca4e4cb1790a56b00c9e9d5b764da1079662a0b)

Author SHA1 Message Date
Nils Kuhnert a171d5aa9d
Added Ocean Buffalo synonym for Ocean Lotus 2019-02-03 21:36:21 +01:00
Alexandre Dulaunoy b9f1317941
Merge pull request #332 from Delta-Sierra/master 
Add APT39 & LockerGoga
 2019-02-01 18:36:12 +01:00
Nils Kuhnert 0b04046d91
Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant. 2019-02-01 13:17:43 +01:00
Deborah Servili 233b7f3aff
add APT39 2019-01-31 18:48:19 +01:00
Deborah Servili b4751d396a
add LockerGoga ransomware 2019-01-30 12:07:19 +01:00
Nils Kuhnert d45a32e9e2
Added Shadow Crane as synonym for Dark Hotel. 2019-01-30 08:22:46 +01:00
Nils Kuhnert 42ecbd801c
Added "Stardust Chollima" as synonym for Lazarus. 2019-01-29 08:36:12 +01:00
Alexandre Dulaunoy 898bdaf7f8
Merge pull request #328 from Delta-Sierra/master 
add Silence Group
 2019-01-25 16:43:08 +01:00
Deborah Servili c11a31b12a
add Silence Group 2019-01-25 16:19:51 +01:00
Thomas Dupuy d38fb407ec add alternative name for DarkHydrus 2019-01-21 23:14:34 -05:00
Deborah Servili 45ed56cd61
add LoJax ref 2019-01-17 10:49:23 +01:00
Deborah Servili 3bdbd6646b
add Cold River Threat actor 2019-01-17 09:44:09 +01:00
Deborah Servili 5d61a75886
fix versions 2019-01-14 16:34:28 +01:00
Deborah Servili 61093f6f07
add several ransomware and threat actors 2019-01-14 16:28:15 +01:00
Deborah Servili 90d2bf7bc1
add drakhydrus ref 2019-01-11 10:17:07 +01:00
Deborah Servili cddfd5fcd1
TA505 threat actorand affiliates malwares 2019-01-11 09:53:08 +01:00
Deborah Servili 4547b09f49
add hidenad synonym 2019-01-10 11:53:30 +01:00
Deborah Servili a10a417b0a
add Cryptomix variants refs 2019-01-10 10:03:22 +01:00
Deborah Servili d3ae9e1e14
update version 2019-01-09 15:54:09 +01:00
Deborah Servili 90e3602db6
add AndroidOS_HidenAd 2019-01-09 15:33:34 +01:00
Deborah Servili cc0bd96527 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-01-09 14:54:33 +01:00
Christophe Vandeplas 0ba220987d chg: [mitre] bump to latest MITRE ATT&CK dataset 2018-12-29 18:40:21 +01:00
Christophe Vandeplas 50c817a1fd
MITRE galaxy regeneration + updated migration script 2018-12-29 18:14:47 +01:00
Nils Kuhnert 1e4ebdd560
Added OilRig synonym "Helix Kitten". 2018-12-27 09:10:21 +01:00
Kafeine 5766cd68f8 zTDS 2018-12-22 11:51:40 +01:00
Kafeine ce94cb8458 novidade,taurus 2018-12-22 10:19:52 +01:00
Deborah Servili 91b8da1e9e
add ransomwares 2018-12-20 00:37:49 +01:00
Alexandre Dulaunoy de66295539
Merge pull request #316 from danielplohmann/master 
New name SNAKEMACKEREL for APT28 by Accenture
 2018-12-19 14:06:38 +01:00
Gerard Wagener 7b347017e2
Removed Puplishing industry 2018-12-19 11:45:31 +01:00
Daniel Plohmann cc22da1200 Microsoft alias for apt29 is YTTRIUM 2018-12-19 11:28:44 +01:00
Daniel Plohmann c9e15b0c08 new name SNAKEMACKEREL for APT28 by Accenture 2018-12-19 10:46:58 +01:00
Alexandre Dulaunoy 27f6b19570
Merge pull request #315 from Delta-Sierra/master 
add OSX malwares
 2018-12-18 17:43:34 +01:00
Deborah Servili e6fa06f178
add OSX malwares 2018-12-18 16:26:49 +01:00
Alexandre Dulaunoy a04790ac41
chg: [malpedia] updated to the latest version 
Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp
 2018-12-14 19:00:18 +01:00
Deborah Servili cb4345adf9
add operation sharpshooter 2018-12-13 13:47:54 +01:00
Deborah Servili a9265d9858
update toll version 2018-12-13 09:44:09 +01:00
Deborah Servili 9f29f297d2
add shamoon synonym 2018-12-13 09:43:20 +01:00
Deborah Servili 3a2ac48faa
fix tool version 2018-12-12 15:39:34 +01:00
Deborah Servili 3ef58f7b21
fix exploit-kit version 2018-12-12 15:38:39 +01:00
Deborah Servili 70d68a312c
add some clusters or info 2018-12-12 15:26:54 +01:00
Deborah Servili 169d69871a
add Goden Chickens and affiliates 2018-12-12 13:52:55 +01:00
Deborah Servili 3183a4d1ff
add ransomwares 2018-12-12 09:27:27 +01:00
Christophe Vandeplas 1a65dfb9f4 chg: [mitre] re-generated galaxies and values using the MITRE sources 
and also using the MISP version to keep manually created relationships and such
 2018-12-09 09:16:03 +01:00
Christophe Vandeplas 39ff6b4bbc MITRE sorted 
While dicts were sorted, lists were not yet sorted. This current sort algo is not yet the best, but is a good start. A good sort is needed for better comparison afterwards with automated tools. In a next stage tt will also be needed in the validate_all scripts.
 2018-12-09 08:32:48 +01:00
Deborah Servili bf77e1125a
add Operation Poison Needles 2018-12-07 16:32:09 +01:00
Deborah Servili 79828d7411
add clusters 2018-12-07 13:25:56 +01:00
Deborah Servili 5a725e71ef
add several clusters 2018-12-06 16:13:51 +01:00
Alexandre Dulaunoy ac2b5dbe05
fix: [ransomware] more duplicates removed 2018-12-02 12:00:17 +01:00
Alexandre Dulaunoy 2e8f139daa
fix: [ransomware] removed duplicate values 2018-12-02 11:54:34 +01:00
Deborah Servili be9b4ff40f
add DNSpionage cluster 2018-11-29 16:38:06 +01:00
Deborah Servili ef54489ea9
add everbe rasomnotes 2018-11-29 15:33:39 +01:00
Deborah Servili 6382857ee3
add ransomwares 2018-11-29 15:23:57 +01:00
Deborah Servili c81f128d98
add ransomwares 2018-11-27 15:59:26 +01:00
Deborah Servili 6f255c0999
add Aurora Ransomware metadata 2018-11-26 09:30:54 +01:00
Deborah Servili e5487305f1
add Aurora Ransomware synonym 2018-11-26 08:33:11 +01:00
Deborah Servili 9f5e10abf6
fix version 2018-11-23 16:16:58 +01:00
Deborah Servili b6b1c7171a
Add Rotexy 2018-11-23 16:15:48 +01:00
Deborah Servili dac1c08491
update version 2018-11-23 12:42:41 +01:00
Deborah Servili b50c8bd805
add PNG Dropper 2018-11-23 10:38:36 +01:00
Deborah Servili 1be4a1cedb
add reference for Emotet/Geodo 2018-11-22 09:00:43 +01:00
Deborah Servili 2bf5d46cc4 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2018-11-22 08:59:53 +01:00
Deborah Servili 2f5031b845
add several references for Emotet and others 2018-11-22 08:37:45 +01:00
Deborah Servili de38e7249c
Merge branch 'master' into master 2018-11-19 15:23:45 +01:00
Deborah Servili ce61b2d2dd
update oilrig related clusters + others 2018-11-19 14:56:13 +01:00
Alexandre Dulaunoy eec7693081
chg: uuid fixed 2018-11-18 06:31:04 +01:00
Alexandre Dulaunoy d324a1c39b
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2018-11-18 06:29:50 +01:00
Deborah Servili eb6f6a3f49
fix rat galaxy version 2018-11-16 16:40:23 +01:00
Deborah Servili 77b556d702
jq and add ref in tool galaxy -hit version 100- 2018-11-16 13:11:55 +01:00
Deborah Servili faa16879da
add TheOneSpy 2018-11-16 13:10:21 +01:00
Alexandre Dulaunoy c9fd60d14b
chg: [threat-actor] INDRIK SPIDER added 2018-11-14 20:46:06 +01:00
Deborah Servili ca33f1c2ce Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-11-13 15:25:34 +01:00
Deborah Servili f55277b682
add several rqansomware and HookAds campaign 2018-11-13 12:20:37 +01:00
Alexandre Dulaunoy a505995b79
fix: [ransomware] duplicate removed 2018-11-13 07:12:36 +01:00
Alexandre Dulaunoy 51d3af11fc
chg: [ransomware] duplicate removed 2018-11-13 07:08:49 +01:00
Alexandre Dulaunoy a4c916c916
Merge branch 'master' of github.com:MISP/misp-galaxy 2018-11-13 07:01:56 +01:00
Benoit Sevens 8f8c69134e
Update threat-actor.json 
Add LuckyMouse link
 2018-11-12 13:12:14 +01:00
Deborah Servili 46dba06e40
add/update ransomawares 2018-11-09 16:34:00 +01:00
Deborah Servili 14444e4321
add several tools and refs 2018-11-08 10:39:32 +01:00
Daniel Plohmann 1f6b606f75
added APT38 as (FireEye) alias for Lazarus 
cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.
 2018-11-07 17:19:50 +01:00
Deborah Servili 954264c084
Merge pull request #296 from Delta-Sierra/master 
update ransomware galaxy
 2018-11-07 09:19:23 +01:00
Deborah Servili d41a279c73
update ransomware galaxy 2018-11-05 16:23:10 +01:00
Alexandre Dulaunoy 8ae3214cd1
Merge pull request #295 from Delta-Sierra/master 
update Red Alert 2 Android Banking Trojan
 2018-11-05 12:37:29 +01:00
Deborah Servili 050a94a2c0
jq fix 2018-11-05 11:01:57 +01:00
Deborah Servili ae24b71f45
update version 2018-11-05 10:45:54 +01:00
Deborah Servili 5fd4cfa4ee
update Red Alert 2 Android Banking Trojan 2018-11-05 09:50:10 +01:00
Deborah Servili 7813a29460
Merge pull request #294 from Delta-Sierra/master 
add ransomwares
 2018-10-31 16:05:18 +01:00
Deborah Servili ad07b70a03
add ransomwares 2018-10-31 14:52:40 +01:00
Alexandre Dulaunoy 2465235817
Merge pull request #293 from Delta-Sierra/master 
add Operation EvilTraffic
 2018-10-30 21:02:59 +01:00
Deborah Servili e6b1eec329
add Chalubo botnet (+ jqallthethings) 2018-10-30 14:39:13 +01:00
Deborah Servili 41942d0daf
add Operation EvilTraffic 2018-10-30 13:28:46 +01:00
Deborah Servili 74ff4b957a
add Operation EvilTraffic 2018-10-30 13:28:27 +01:00
Nils Kuhnert bc0bf1ca9f
Corrected DarkHotel threat actor entry 2018-10-29 09:03:30 +01:00
Deborah Servili 6e8abc0712
fix duplicate ref 2018-10-23 15:37:51 +02:00
Deborah Servili af6020077e
add August Stealer 2018-10-23 15:25:37 +02:00
Deborah Servili 4a54044de6
add NukeSped reference 2018-10-22 14:50:57 +02:00
Deborah Servili 32d90a27e1
add GhostMiner 2018-10-22 14:46:44 +02:00
Deborah Servili bd68ee280e Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-22 11:09:37 +02:00
Deborah Servili 504570a298
add tools from https://github.com/misterch0c/shadowbroker 2018-10-22 11:06:25 +02:00
Deborah Servili 4564c5eb37
add DarkPulsar and affiliates + update some refs 2018-10-22 10:14:30 +02:00
Christophe Vandeplas 4232f0b737 chg: further categorization of galaxies 2018-10-19 14:15:20 +02:00
Christophe Vandeplas 9dddc4427c jq 2018-10-19 10:23:09 +02:00
Christophe Vandeplas 6a9a9b7e1b Merge remote-tracking branch 'MISP/master' 2018-10-19 10:18:45 +02:00
Christophe Vandeplas ddccac58c8 chg: categorization of galaxies 
This allows relationships to be created.
 2018-10-19 10:18:14 +02:00
Alexandre Dulaunoy 0ecf34f06e
fix: [malpedia] version 2018-10-18 11:23:48 +02:00
Alexandre Dulaunoy 83c6e6bef1
fix: [malpedia] broken reference has been fixed 2018-10-18 11:17:19 +02:00
Alexandre Dulaunoy 3771c21218
Merge pull request #287 from cvandeplas/master 
fixes an important bug in the gen_relations
 2018-10-18 11:15:17 +02:00
Andras Iklody 66ded6d935
Some minor fixes 2018-10-17 20:59:08 +02:00
Christophe Vandeplas ccebd86eed fix: add missing relations from commit 78c1f07359 2018-10-17 19:18:16 +02:00
Christophe Vandeplas 2b24efb14a fix: add missing relations from commit b857be9cab 2018-10-17 19:15:57 +02:00
Christophe Vandeplas 76b1429f10 fix: add missing relations from commit a81bbe288f 2018-10-17 19:13:35 +02:00
Christophe Vandeplas 84af053761 fix: add missing relations from commit 29beb01dc3 2018-10-17 19:07:01 +02:00
Christophe Vandeplas 873bc873b4 Merge remote-tracking branch 'MISP/master' 2018-10-17 18:28:44 +02:00
Christophe Vandeplas 1e90cac717 fix: intrusion is an actor and not a tool 2018-10-17 18:17:33 +02:00
Alexandre Dulaunoy 9129724343
Merge pull request #286 from Delta-Sierra/master 
Several clusters, refs, others.
 2018-10-17 17:32:45 +02:00
Deborah Servili c8cbb609a2
add GreyEnergy 2018-10-17 16:05:51 +02:00
Christophe Vandeplas ca6c1caa8f fix: jq all the things 2018-10-17 08:26:45 +02:00
Christophe Vandeplas 2bb4df134b chg: removal of older unused relationships 2018-10-17 08:20:12 +02:00
Christophe Vandeplas c51ba2e868 chg: MITRE relationships included in the respective cluster. 2018-10-17 08:08:58 +02:00
Deborah Servili 2ea560f9a7
add refs & synonyms 2018-10-15 12:02:21 +02:00
Deborah Servili c134035a6d
add several refs 2018-10-15 11:33:37 +02:00
Deborah Servili 8d0c87c830
add several refs 2018-10-15 11:28:01 +02:00
Deborah Servili 11a27df82d
add roaming mantis group 2018-10-12 15:50:52 +02:00
Deborah Servili b3109f6aea Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-12 13:55:01 +02:00
Christophe Vandeplas f26a4f2806 fix: minor newline difference after jq_all_the 2018-10-12 12:31:29 +02:00
Christophe Vandeplas f14d616e22 chg: magical mapping with malpedia 2018-10-12 11:00:00 +02:00
Christophe Vandeplas 65eb66a739 fix: automatically fix missing uuids 2018-10-12 10:55:24 +02:00
Christophe Vandeplas 2fbd8ce485 jq sort keys 
Allows automation to edit the files
 2018-10-12 10:35:31 +02:00
Alexandre Dulaunoy 4ff2a45cbb
chg: [malpedia] duplicate urls removed 2018-10-10 22:18:32 +02:00
Alexandre Dulaunoy 2d2749ccea
jq all the things 2018-10-10 22:12:59 +02:00
Steffen Enders 125f676d17
Updated malpedia.json to the current state 
Fetched the new malpedia galaxy cluster from https://malpedia.caad.fkie.fraunhofer.de/api/get/misp - this includes an additional ~120 new families.
 2018-10-10 17:31:27 +02:00
Deborah Servili 4c367737ac
add magecart ref 2018-10-10 14:52:16 +02:00
Deborah Servili ec6b04cf6a
add SAVEfiles ransomware 2018-10-10 14:05:24 +02:00
Deborah Servili ed5aa150a7
update version 2018-10-09 11:35:17 +02:00
Deborah Servili 510a37084c
update matrix ransomware 2018-10-08 16:26:58 +02:00
Deborah Servili 5fb9db8282
add Triout Android Malware 2018-10-05 16:21:01 +02:00
Deborah Servili 655b1619e4 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-05 16:06:25 +02:00
Deborah Servili 58a86e4e26
fix failed copy-paste 2018-10-05 15:53:03 +02:00
Alexandre Dulaunoy 8149960aa3
Merge pull request #276 from Delta-Sierra/master 
add CoalaBot + Kraken Cryptor Ransmware + refs
 2018-10-05 15:52:04 +02:00
Davide Arcuri 253fbed356 Added Malpedia Galaxy 
based on malpedia git repo

Co-Authored-By: garanews <garanews@users.noreply.github.com>
 2018-10-05 14:30:31 +02:00
Deborah Servili 80bf2f5556
jq 2018-10-05 12:04:13 +02:00
Deborah Servili 06c4869125
add CoalaBot + Kraken Cryptor Ransmware + refs 2018-10-05 11:09:54 +02:00
Deborah Servili 9225666b92
add CoalaBot + Kraken Cryptor Ransmware + refs 2018-10-05 11:09:45 +02:00
Alexandre Dulaunoy ecba2dbdbf
Merge pull request #274 from Delta-Sierra/master 
Refs updates
 2018-10-04 17:24:57 +02:00
Deborah Servili 7cf37a57f1
add Persirai botnet 2018-10-04 14:17:16 +02:00
Deborah Servili 50fecccf39
update Torii botnet 2018-10-04 13:44:32 +02:00
Deborah Servili 138a4e6f9e
add ref for Torii botnet 2018-10-04 13:41:27 +02:00
Deborah Servili b45b4ce0b1
add refs 2018-10-04 12:01:26 +02:00
Alexandre Dulaunoy 276992f180
Merge pull request #273 from Delta-Sierra/master 
update synonyms & attributions
 2018-10-04 11:17:19 +02:00
Deborah Servili 2893d715d6
Add ZEBROCY tool 2018-10-04 10:52:40 +02:00
Deborah Servili 5bcf34a953
update regarding https://twitter.com/adulau/status/1047764090410737664 2018-10-04 10:28:22 +02:00
Deborah Servili c78416eee1
update synonyms & attributions 2018-10-04 10:09:34 +02:00
Deborah Servili 123099cd6d
Merge pull request #272 from Delta-Sierra/master 
New clusters based on CIG Circular 66 – FASTCash ATM Cash Out Campaign
 2018-10-03 16:38:33 +02:00
Deborah Servili 4d68b1c205
add NukeSped 2018-10-03 16:28:50 +02:00
Deborah Servili 3dfe8a5a34 add FASTCash 2018-10-03 15:09:14 +02:00
Alexandre Dulaunoy 63b777fc9e
Merge pull request #271 from Delta-Sierra/master 
Several updates
 2018-10-01 21:51:11 +02:00
Deborah Servili 403f162451
add ref for magecart 2018-10-01 11:54:07 +02:00
Deborah Servili 35582f7ed5
new threat actors & tools 2018-10-01 11:52:40 +02:00
Alexandre Dulaunoy 2402c7d98f
chg: [tool] NOKKI added 
ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-new-konni-malware-attacking-eurasia-southeast-asia/
 2018-09-29 09:01:47 +02:00
Deborah Servili 3649e03ad5 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-09-28 16:28:16 +02:00
Deborah Servili f828c8f79e
add synonym 2018-09-28 16:18:54 +02:00
Deborah Servili a27534cfa1
add refs 2018-09-28 15:40:00 +02:00
Alexandre Dulaunoy 49fe210812
Merge pull request #270 from Delta-Sierra/master 
new clusters, relations and information
 2018-09-28 12:57:13 +02:00
Deborah Servili 97581d7185
jq 2018-09-28 11:20:38 +02:00
Deborah Servili fbf21487cf
new clusters and informtion 2018-09-28 11:08:21 +02:00
Alexandre Dulaunoy 46eddf1874
chg: [botnet] Torii added 2018-09-27 15:43:49 +02:00
Deborah Servili 78c1f07359
new ransomware and relations 2018-09-27 15:42:20 +02:00
Nex 014aa325b7 Added missing country values 2018-09-26 23:05:46 +02:00
Deborah Servili 29beb01dc3
add relationships on Mirai 2018-09-24 16:06:36 +02:00
Deborah Servili f7e10cb38d
add references 2018-09-24 14:58:21 +02:00
Deborah Servili 77897be97e
add BusyGasper android spyware 2018-09-24 12:12:41 +02:00
Deborah Servili 2bc8e1e719
add Cobalt Dickensthreat actor 2018-09-24 11:51:09 +02:00
Deborah Servili 69c5fc30e5
add remcos ref 2018-09-24 11:07:17 +02:00
Deborah Servili 5a1734f170
update version 2018-09-21 11:16:36 +02:00
Deborah Servili 3c7e367cbf
fix field mistake 2018-09-21 11:14:19 +02:00
Deborah Servili 1cee9d71e0
update Lazarus group cluster 2018-09-20 15:38:32 +02:00
Deborah Servili 6d43d52731
new unnamedthreat actor 2018-09-20 13:24:11 +02:00
Deborah Servili d0864a6531
new threat actors 2018-09-20 12:10:20 +02:00
Deborah Servili 0a724bee3d
merge 2018-09-19 16:01:46 +02:00
Deborah Servili 3f22dbd17d
add notpetya and update jadeRAT 2018-09-19 15:06:43 +02:00
Deborah Servili 058f778e61
add references 2018-09-19 09:04:04 +02:00
Alexandre Dulaunoy 79146b9d10
fix: array in synonyms (MISP accepts it but not the schema ;-) 2018-09-19 07:35:35 +02:00
Alexandre Dulaunoy 6105522453
chg: [threat-actor] Iron Group added 
ref: https://www.intezer.com/iron-cybercrime-group-under-the-scope-2/
 2018-09-19 07:08:16 +02:00
Alexandre Dulaunoy 4ae0ccd192
chg: [tool] Xbash added 
ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-xbash-combines-botnet-ransomware-coinmining-worm-targets-linux-windows/
 2018-09-19 07:03:56 +02:00
Alexandre Dulaunoy 8238bd5eb1
Merge pull request #263 from botherder/bahamut 
Added Bahamut to threat actors list
 2018-09-19 06:46:26 +02:00
Deborah Servili fd960bfc1b
Add magentocore malware 2018-09-18 23:10:33 +02:00
Nex f0383758fc Added Bahamut to threat actors list 2018-09-18 11:27:32 +02:00
Alexandre Dulaunoy fe60e58f5b
Merge pull request #262 from botherder/mythic-leopard 
Added additional name to C-Major
 2018-09-18 11:25:58 +02:00
Nex 1e502a494e Added additional name to C-Major 2018-09-18 11:18:42 +02:00
Nex ee7f609397 Removed duplicates 2018-09-18 11:16:00 +02:00
Alexandre Dulaunoy 88c9d8d9f6
Merge pull request #259 from botherder/country-sync 
Synced country codes with suspected state sponsor
 2018-09-17 18:18:00 +02:00
Nex be0dd94c90 Synced country codes with suspected state sponsor 2018-09-17 16:26:14 +02:00
Nex c2ea505459 Merged Transparent Tribe in C-Major 2018-09-17 16:11:18 +02:00
Deborah Servili ff9409e164
add blacknurse logo 2018-09-13 12:42:01 +02:00
Deborah Servili 1dcf2e50a7
add blacknurse 2018-09-13 12:33:19 +02:00
Deborah Servili 17d3959445
add Crypt0saur ransomware 2018-09-13 11:34:57 +02:00
Deborah Servili 0843fdfb23
adding and updating clusters 2018-09-13 09:03:41 +02:00
Deborah Servili 039fc91bd6
add description for sigma ransomware 2018-09-12 14:27:09 +02:00
Deborah Servili a73424139f
fix versions 2018-09-12 14:26:44 +02:00
Deborah Servili f107563cad
add ref for operation Applejeus 2018-09-12 09:34:16 +02:00
Deborah Servili cb5fa5e822
fix version 2018-09-10 14:21:14 +02:00
Deborah Servili c92dc15937
add Operation AppleJeus 2018-09-10 14:13:09 +02:00
Deborah Servili a81bbe288f
fix some relations 2018-09-10 12:27:40 +02:00
Deborah Servili 40d5cca20f
clusters 2018-09-07 16:03:40 +02:00
Deborah Servili addda6c545
more clusters~ 2018-09-05 16:39:33 +02:00
Deborah Servili 14024efbf1
add CamuBot Banker Trojan 2018-09-05 09:19:35 +02:00
Deborah Servili 5866b660c8
jq~ 2018-09-05 08:29:08 +02:00
Deborah Servili fb328b0ef4
add ransomwares 2018-09-05 08:20:24 +02:00
Deborah Servili 0a9e91766b Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-09-04 10:18:07 +02:00
Deborah Servili 912e91a5f5
add ransomware 2018-09-04 09:43:58 +02:00
Alexandre Dulaunoy 0acc41131d
"jq all the thing (tm)" 2018-09-01 11:58:52 +02:00
Alexandre Dulaunoy e55f91b7ac
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master 2018-09-01 11:56:10 +02:00
Kafeine ac94f367b1
+ Fallout 2018-09-01 10:07:46 +02:00
Kafeine 21cf5ec957
Hunter EK > Active 2018-08-30 22:47:00 +02:00
Kafeine 85130f264d
Adding Underminer EK 2018-08-30 17:27:59 +02:00
Kafeine afa3fb4cfd
Status from Terror, Bingo and Astrum 2018-08-30 17:08:37 +02:00
Kafeine 67e9ef2719
Adapting to modification from Misp repository 2018-08-30 17:04:08 +02:00
Deborah Servili f14dd27315
add cfr data 2018-08-27 15:29:16 +02:00
Deborah Servili d1940b6a69
Update microsoft-activity-group.json version 2018-08-27 08:38:22 +02:00
Deborah Servili 9efca2fd79 more clusters 
Signed-off-by: Deborah Servili <deborah.servili@gmail.com>
 2018-08-24 16:11:16 +02:00
Deborah Servili c943d1c9d1
add APT28/STRONTIUM refs 2018-08-22 09:59:40 +02:00
Deborah Servili afea4ca5e7 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-08-22 09:03:26 +02:00
Alexandre Dulaunoy f8c5640613
chg: [tool] biscuit biscvt tool BISKVIT 
ref: https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html
 2018-08-21 10:48:47 +02:00
Alexandre Dulaunoy cd76f19f52
chg: [threat-actor] APT-C-35 actor added 
ref: https://ti.360.net/blog/articles/latest-activity-of-apt-c-35/
 2018-08-15 20:25:57 +02:00
Deborah Servili 3940964956
update Dharma Ransomware 2018-08-14 15:56:09 +02:00
Deborah Servili d5f35d94dc
version update 2018-08-14 12:21:50 +02:00
Deborah Servili f3c02ad195
merge black ruby duplicate (delete the newer) 2018-08-14 12:20:29 +02:00
Deborah Servili 31142b41ac
merge 2018-08-14 12:09:21 +02:00
Deborah Servili a28c50203e
fix 2018-08-14 12:07:12 +02:00
Deborah Servili 2081dc1627
resolve merge confilct -I hope- 2018-08-14 12:06:42 +02:00
Deborah Servili 4e911b2c17
Merge branch 'master' into master 2018-08-14 11:43:59 +02:00
Deborah Servili 7829e0fab6
fix typo and missing uuid 2018-08-14 11:41:06 +02:00
Deborah Servili a646a835fe
add Rosenbridge backdoor 2018-08-14 10:09:26 +02:00
Christophe Vandeplas 88162aa44e chg: [mapping] Generated automatic mapping between clusters 2018-08-14 09:35:22 +02:00
Christophe Vandeplas 5478f0aa45 no change: dump files with sort_keys=True 
This is needed to keep better track of the changes when other tools load and save the json files.
 2018-08-13 17:06:29 +02:00
Christophe Vandeplas 021107e597 fix: [threat-actor] added missing uuids 2018-08-13 17:00:40 +02:00
Deborah Servili b100b0cedd
add KEYPASS ransomware 2018-08-13 15:50:09 +02:00
Deborah Servili f1dcb05576
Merge pull request #246 from Delta-Sierra/master 
add Skygofree android spyware
 2018-08-13 12:28:30 +02:00
Deborah Servili 56fe9eb63c
add Skygofree android spyware 2018-08-13 12:20:16 +02:00
Alexandre Dulaunoy 9059a85eed
chg: [tool] KEYMARBLE malware added 
ref: https://www.us-cert.gov/ncas/analysis-reports/AR18-221A
 2018-08-11 16:14:39 +02:00
Deborah Servili 27805ca768
add tools used by SamSam 2018-08-09 15:55:36 +02:00
Deborah Servili 597e7bacb9
add ransomwares 2018-08-09 13:53:04 +02:00
Alexandre Dulaunoy 6620b5575a
fix: [threat-actor] related is an array of JSON objects 2018-08-09 07:53:42 +02:00
Alexandre Dulaunoy 1429b60555
chg: [threat-actor] jq document 2018-08-08 16:38:39 +02:00
Deborah Servili ebc7287e14
update schema 2018-08-08 16:12:29 +02:00
Deborah Servili 33a300b773
tags is an array 2018-08-08 15:59:44 +02:00
Deborah Servili b857be9cab
relationship system - v2 2018-08-08 15:51:22 +02:00
Deborah Servili 050a864be0
update some clusters and try to add a relationship system 2018-08-08 14:20:38 +02:00
Deborah Servili 84adb50f0f
add RedAlpha campaigns 2018-08-07 13:55:05 +02:00
Deborah Servili b7de06ffcc
delete forgotten conflict marker 2018-08-06 08:49:44 +02:00
Deborah Servili 010df0a2b6
resolve merge conflict 2018-08-06 08:48:21 +02:00
Deborah Servili def23775e5
resolve merge conflict 2018-08-06 08:45:03 +02:00
Nils Kuhnert ab49b58b02
Added DarkHydrus 2018-08-06 08:33:34 +02:00
Nils Kuhnert 4654f51889
Two small typos 2018-08-05 15:09:38 +02:00
Deborah Servili e5b185deee
Merge branch 'master' into master 2018-08-03 16:11:16 +02:00
Deborah Servili 35aa8ba34e
delete duplicate gorgon group 2018-08-03 16:08:43 +02:00
Deborah Servili a9a71ef84c
more clusters 2018-08-03 15:58:54 +02:00
Alexandre Dulaunoy b3701b6b34
chg: [threat-actor] The Gordon Group added 
ref: https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/
 2018-08-03 10:26:52 +02:00
Alexandre Dulaunoy a0dfdd65ae
chg: [rat] Hallaj PRO Rat added 
ref: https://securelist.com/attacks-on-industrial-enterprises-using-rms-and-teamviewer/87104/
misp-event: 5b63f5e4-bf24-4f46-8340-48fc02de0b81
 2018-08-03 08:34:55 +02:00
Alexandre Dulaunoy 3da005a3f3
fix: jq all the things(tm) 2018-08-02 15:15:47 +02:00
Alexandre Dulaunoy 1fdf47d509
fix: [threat-actor] synonyms are always arraus 2018-08-02 15:13:18 +02:00
Alexandre Dulaunoy ece56dff38
chg: [threat-actor] leafminer - RASPITE added 2018-08-02 15:08:39 +02:00
Alexandre Dulaunoy c232b3dd5a
chg: [tool] added based on Carbanak tooling description from Crowdstrike 
ref: https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/
 2018-08-02 10:30:47 +02:00
Alexandre Dulaunoy 43fa95df7a
chg: [threat-actor] new reference to CARBON SPIDER/Carbanak 2018-08-02 10:03:18 +02:00
Alexandre Dulaunoy 4cf84858e3
chg: [tool] Bisonal malware added (new variant with encryption capabilities) 2018-07-31 15:26:11 +02:00
Deborah Servili e7d2541929 add Kronos Banking Trojan 2018-07-25 09:46:46 +02:00
Deborah Servili 381f7e4a19 Add CFR.org metadata into the galaxy - part 2 2018-07-25 09:08:16 +02:00
Deborah Servili 28456545be Merge https://github.com/MISP/misp-galaxy 2018-07-16 09:16:13 +02:00
Alexandre Dulaunoy 98db303047
chg: [threat-actor] The Big Bang campaign/group added 2018-07-10 08:49:00 +02:00
Alexandre Dulaunoy 43a2c7f0ef
chg: [botnet] Xor DDoS added 2018-07-09 14:25:19 +02:00
raw-data 77cfaa8221 [add] new backdoor galaxy and cluster 2018-07-06 20:09:52 +01:00
Raphaël Vinot e5939e3248 Merge branch 'master' of github.com:MISP/misp-galaxy 2018-07-06 15:25:09 +02:00
Raphaël Vinot 6f7a7921ae new: Add entries from Bambenek Consulting 2018-07-06 15:25:05 +02:00
raw-data fa8d0e35f6 [add] x1 new entry in stealer.json - AZORult 2018-07-06 11:00:11 +01:00
Deborah Servili cae0f7e1ad merging attempt 2018-06-29 16:39:34 +02:00
Deborah Servili 8c51ef98b3 add cfr related informations -still in progress- 2018-06-29 16:36:58 +02:00
Deborah Servili fb6b01cc95
Merge branch 'master' into master 2018-06-27 09:39:28 +02:00
Deborah Servili b1aac6b35b cfr update -in progress + add clusters associated to RANCOR 2018-06-27 09:37:43 +02:00
Alexandre Dulaunoy 1bd0fb34d7
Merge pull request #233 from Delta-Sierra/master 
Add CFR.org metadata into the galaxy - Test
 2018-06-26 14:26:18 +02:00
Deborah Servili 6f9e639981 add cfr prefix for cfr data - test 2018-06-26 10:07:14 +02:00
Deborah Servili 1cd6bddf0c Add CFR.org metadata into the galaxy - Test 2018-06-26 09:40:13 +02:00
Deborah Servili 3838efb0bb some updates 2018-06-26 09:26:32 +02:00
raw-data f649af8ba5 [ADD] x1 new entry in tool.json - Koadic 2018-06-25 15:59:30 +01:00
raw-data b3dffeb8d4 [ADD] x2 new rat - Sisfader, SocketPlayer 2018-06-25 15:46:42 +01:00
raw-data 0920d13c05 [ADD] banker.json version bump 2018-06-25 15:41:32 +01:00
raw-data b382425d9c [ADD] x2 new banker - Backswap, Karius 2018-06-25 15:14:56 +01:00
Nils Kuhnert ed26cfb042
Updated APT1 report link 2018-06-22 13:49:05 +02:00
Deborah Servili 8ebde0540a
Update cert-eu-govsector.json 2018-06-22 12:50:32 +02:00
Deborah Servili e088194ea9
fix typo in type 2018-06-22 12:45:39 +02:00
Andras Iklody 8e014674af
Fixed typo 2018-06-20 09:45:16 +02:00
Deborah Servili dcda058944 update verion 2018-06-20 09:36:36 +02:00
Deborah Servili e18fdf42da add Thrip as threat actor 2018-06-20 09:30:15 +02:00
Deborah Servili dcd159f8ed add olympic destroyer 2018-06-19 15:26:40 +02:00
Deborah Servili 92cbd29091 add severals ransomware 2018-06-19 13:04:32 +02:00
Deborah Servili cee83f677e more clusters 2018-06-18 14:30:51 +02:00
Deborah Servili d8c83cf2d6 add cluster in threat actor 2018-06-18 10:54:58 +02:00
Deborah Servili ab577afacd add ClipboardWalletHijacker 2018-06-18 09:47:03 +02:00
Deborah Servili 333db20791 add MysteryBot in android galaxy 2018-06-18 08:41:52 +02:00
Deborah Servili 397b37dcc8 add some ransomwares 2018-06-15 15:14:42 +02:00
Alexandre Dulaunoy e6bae7165c
Merge pull request #224 from Delta-Sierra/master 
add some clusters
 2018-06-13 12:43:35 +02:00
Deborah Servili 4ac23483b9 add some tools 2018-06-13 11:54:50 +02:00