MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
442 Commits
6 Branches
47 Tags
73 MiB
Commit Graph

206 Commits (8e865ab9cdca8cb7598dfd019261985319b48b49)

Author SHA1 Message Date
Kafeine 321044cdac Update Terror 2017-04-14 13:46:59 +01:00
Kafeine 777fc1cde3 Updated 
Blaze <-> Terror - Updated Sundown and Nebula status
 2017-04-14 13:44:03 +01:00
Déborah Servili 9412519502 correct copypasta mistake 2017-04-12 16:11:57 +02:00
Déborah Servili bbc2b79a5e add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html 2017-04-12 16:07:48 +02:00
Déborah Servili 8a645f42c9 update tool 2017-04-11 16:06:27 +02:00
Déborah Servili 7b5aaaeff2 json fix 2017-04-11 14:18:29 +02:00
Déborah Servili eee2c6d6b5 update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html 2017-04-11 14:09:44 +02:00
Alexandre Dulaunoy bbf6716c73 Longhorn (CIA) added 2017-04-10 20:22:57 +02:00
Alexandre Dulaunoy ab5b73a3cd Sathurbot added 2017-04-06 20:49:53 +02:00
Alexandre Dulaunoy 8c09223477 The product from NSO Group Technologies added to the list of tools. 
The Pegasus name is used as synonym of Chrysaor ;-)
 2017-04-04 20:42:08 +02:00
Alexandre Dulaunoy 0578d7b7b1 The mysterious ZIRCONIUM activity group added 2017-04-03 19:44:36 +02:00
nyx0 78cdb10aae Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures 2017-03-31 09:28:50 -04:00
Alexandre Dulaunoy b3f1069686 Trochilus and MoonWind RATs added 2017-03-30 15:01:23 +02:00
Alexandre Dulaunoy f0e42a1818 KHRAT added 2017-03-29 16:37:31 +02:00
chrisdoman dbf989c742 Added descriptions and reference to threat-actor json 2017-03-22 12:52:05 +00:00
Raphaël Vinot 1ed0558c07 Merge branch 'master' into master 2017-03-16 17:38:59 +01:00
Raphaël Vinot e1b5701351 JQ all the things 2017-03-16 17:31:43 +01:00
Raphaël Vinot 0d8d265319 Fix typo. 2017-03-16 17:27:17 +01:00
CERT-Bund 4112a041f7 Added groups, joined groups, added synonyms (see extended description) 
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
 2017-03-16 17:02:55 +01:00
Alexandre Dulaunoy 71ad9099c4 IMEIJ added 2017-03-13 13:59:46 +01:00
Kafeine 73a82418df Empire status, Nebula, Blaze/Terror 2017-03-02 21:29:19 +00:00
Alexandre Dulaunoy e002e62204 missing \n at the end of the file 2017-03-01 14:55:45 +01:00
Chris Doman 9e5c983a65 Ran jq 2017-03-01 13:24:00 +00:00
Chris Doman e934f88b3b Added references 
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
 2017-03-01 12:53:52 +00:00
Alexandre Dulaunoy a224c7ce5e add: Gamaredon Group added 2017-02-28 09:17:33 +01:00
Christophe Vandeplas 048b831f53 minor correction 2017-02-27 11:00:48 +01:00
Thanat0s 07cc13feb8 remove duplicate of ratdecode import 2017-02-27 00:38:39 +01:00
Thanat0s 9eb2d097f2 add a bunch of rat from ratdecoder list 2017-02-27 00:23:56 +01:00
Thanat0s 849ca3ebbc Pimp Epic turla 2017-02-26 23:38:50 +01:00
Thanat0s f1ea577e95 pimp and agreggate turla 2017-02-26 23:24:51 +01:00
Thanat0s 3774f05237 Somes alias fetch from : https://attack.mitre.org/wiki/Groups 2017-02-26 23:07:42 +01:00
Thanat0s 2d658a6577 pimp comrat 2017-02-26 22:53:51 +01:00
Thanat0s b865342f2e pimp xneteagle 2017-02-26 22:47:16 +01:00
Thanat0s f4584f3900 pimp xscontrol 2017-02-26 22:41:51 +01:00
Thanat0s b400edbe9b Update Xagent from aptnote Bitdefender-Whitepaper-APT-Mac-A4-en-EN-web(02-23-2017) 2017-02-26 20:40:44 +01:00
Thanat0s 51eee31c21 Pimp lecna/Backspace 2017-02-26 20:16:59 +01:00
Thanat0s 0d0ba42f15 Pimp lecna/Backspace 2017-02-26 20:16:46 +01:00
Thanat0s cdc80e5596 Pimp RarStone 2017-02-26 20:02:34 +01:00
Thanat0s ca68abc0e8 Pimp Pirpi. Hard to say:) 2017-02-26 19:56:17 +01:00
Thanat0s 6e78746a6c pimp webc2 2017-02-26 19:37:10 +01:00
Thanat0s 0775bfce62 pimp winnti 2017-02-26 19:26:21 +01:00
Thanat0s 8de827977c Pimp nettraveler 2017-02-26 19:21:41 +01:00
Thanat0s 7d62d8c3e7 cleanup zeus duplicate in alias and name 2017-02-26 17:08:43 +01:00
Thanat0s 93df12be35 update apt28 tools 2017-02-26 17:06:19 +01:00
Thanat0s afe682cf3f Remove duplicate AlienSpy 2017-02-26 16:52:59 +01:00
Thanat0s 47903f8394 add info to the famous mimikatz 2017-02-25 02:28:43 +01:00
Thanat0s d4e3a08995 add moudor info 2017-02-25 02:22:30 +01:00
Thanat0s 3d79a82bf5 Add Tinba banking 2017-02-25 02:08:51 +01:00
Thanat0s 7eb98609a3 udpate trojan.main 2017-02-25 01:42:33 +01:00
Thanat0s 59b5ed6c1b update evilgrab 2017-02-25 01:30:10 +01:00
Thanat0s 724e836ae9 remove coreshell duplicate 2017-02-25 01:18:03 +01:00
Thanat0s e98de5cb5e add derusbi 2017-02-25 01:12:42 +01:00
Thanat0s bce60b0318 merge IEchecker et sasfi 2017-02-25 01:06:19 +01:00
Thanat0s 50d2b1c871 go for caro, add hi-zor 2017-02-25 00:42:44 +01:00
Thanat0s d502d5b5bf fix side victims of schemaupdate 2017-02-24 23:46:44 +01:00
Thanat0s a29a5afbe8 update 2 array 2017-02-24 23:36:45 +01:00
Thanat0s 7265af6612 go 4 string 2017-02-24 16:24:59 +01:00
Thanat0s b124d8a08d Follow the format 2017-02-24 15:52:08 +01:00
Thanat0s 8240e5f661 json typo 2017-02-24 14:05:57 +01:00
Thanat0s 8c2c47810e Locky removed > ransomware 2017-02-24 14:00:42 +01:00
Thanat0s c1848b1a3a json issue 2017-02-24 13:59:14 +01:00
Thanat0s f496c34fda generic plugx names 2017-02-24 13:57:33 +01:00
Thanat0s bb088f97d1 Update 2017-02-24 13:56:33 +01:00
Thanat0s 0513668fcf Remove JOYRat -> team -> https://www.crowdstrike.com/blog/whois-numbered-panda/ 2017-02-24 13:46:12 +01:00
Thanat0s 796382d4ab Remove Lstudio (group using elise) , add info to PWOBOT 2017-02-24 13:39:53 +01:00
Thanat0s c6ac4d847c Remove EK and Ransomwares 2017-02-24 13:25:38 +01:00
Thanat0s b75e9cf59d Gutemberg on first 10 2017-02-23 10:14:18 +01:00
Alexandre Dulaunoy 644e429110 PupyRAT added 2017-02-20 17:34:55 +01:00
Raphaël Vinot 7db66e05dd Strict schema, update clusters accordingly 2017-02-14 11:34:59 +01:00
Raphaël Vinot 910398fe76 Fix validation, remove duplicate. 2017-02-13 18:52:54 +01:00
Alexandre Dulaunoy 6fb89a644f Merge branch 'master' of github.com:MISP/misp-galaxy 2017-02-10 10:10:00 +01:00
Alexandre Dulaunoy 5442a262ab StreamEX added 2017-02-10 10:09:37 +01:00
Alexandre Dulaunoy 87296fe95c Merge pull request #29 from Delta-Sierra/master 
add Erebus ransomware
 2017-02-09 09:20:58 +01:00
Déborah Servili 8817d4869d add Erebus ransomware 2017-02-09 08:46:21 +01:00
Kafeine a9b9b6f6e1 +Pangimop, alias Microsoft for magnitude 2017-02-06 19:31:21 +00:00
Kafeine 286820f19a Fix 2017-02-06 19:29:55 +00:00
Kafeine f557f9c0c0 +Derbit alias for Sundown 2017-02-06 19:28:06 +00:00
Alexandre Dulaunoy f3f5b3b3ac Merge pull request #28 from Kafeine/master 
Added Microsoft Naming
 2017-02-05 18:03:16 +01:00
Kafeine 645c2e527e Indent 2017-02-05 16:58:56 +00:00
root 06da6ce154 Added Microsoft Naming 2017-02-05 17:52:57 +01:00
Alexandre Dulaunoy 30d9233db6 ZeroT added 2017-02-03 22:26:40 +01:00
Alexandre Dulaunoy 762ee63bf7 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-01-31 09:21:32 +01:00
Alexandre Dulaunoy 92bb392653 Flokibot added 2017-01-31 09:21:19 +01:00
Déborah Servili d6cab37977 change author name to 'Various' 2017-01-31 09:11:26 +01:00
Déborah Servili da331d6ca6 add ransomware galaxy 2017-01-30 15:45:20 +01:00
cgi af16b7c6a1 Adding Zeus to tools 2017-01-26 11:23:37 +01:00
Alexandre Dulaunoy d09b25f2a0 fix: BARIUM and LEAD added 2017-01-25 19:58:50 +01:00
Alexandre Dulaunoy abca7a02d0 Greenbug added 2017-01-23 16:20:09 +01:00
Alexandre Dulaunoy 8ed7374028 Tavdig was missing 2017-01-20 15:31:25 +01:00
Alexandre Dulaunoy 8987006c5d LuminosityLink RAT added 2017-01-19 14:16:55 +01:00
Alexandre Dulaunoy 44cc53d956 EyePyramid added 2017-01-19 08:30:46 +01:00
Alexandre Dulaunoy 7a97b1bcb2 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-01-17 20:56:36 +01:00
Alexandre Dulaunoy 18153f3151 GhostAdmin added 2017-01-17 20:55:27 +01:00
Déborah Servili edea2d25ee add APT28's tools 2017-01-16 12:08:20 +01:00
Alexandre Dulaunoy 19406277d4
Equation Group added 2017-01-13 08:23:03 +01:00
Alexandre Dulaunoy 7ede54c76c "the shoemaker's son always goes barefoot" Regin added 2017-01-13 08:18:41 +01:00
Alexandre Dulaunoy 233562ddc4 Merge pull request #17 from Delta-Sierra/master 
begin preventive-measure galaxy
 2017-01-12 14:32:11 +01:00
Déborah Servili 8c740065c0 complete preventive-measure 2017-01-12 11:48:10 +01:00
Alexandre Dulaunoy a42d4c4f4f Shamoon added 2017-01-11 22:46:04 +01:00
Déborah Servili 733f065851 begin preventive-measure galaxy 2017-01-11 16:14:45 +01:00