MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
1,185 Commits
6 Branches
47 Tags
73 MiB
Commit Graph

691 Commits (9225666b920f04654ecd1351b723711d16edba11)

Author SHA1 Message Date
Deborah Servili 333db20791 add MysteryBot in android galaxy 2018-06-18 08:41:52 +02:00
Deborah Servili 397b37dcc8 add some ransomwares 2018-06-15 15:14:42 +02:00
Alexandre Dulaunoy e6bae7165c
Merge pull request #224 from Delta-Sierra/master 
add some clusters
 2018-06-13 12:43:35 +02:00
Deborah Servili 4ac23483b9 add some tools 2018-06-13 11:54:50 +02:00
Deborah Servili cef7d02622 update version 2018-06-13 11:06:31 +02:00
Deborah Servili c17a2aa7cc add some clusters 2018-06-13 10:39:11 +02:00
Christophe Vandeplas db81051154 minor layout corrections - validate_all 2018-06-12 11:03:09 +02:00
Christophe Vandeplas d0d54b2751 merge pull request 222 2018-06-12 10:58:08 +02:00
Deborah Servili 508bb081c8 add BabaYaga Malware 2018-06-08 15:54:30 +02:00
Deborah Servili 2b447585b6 add PLEAD 2018-06-08 10:18:41 +02:00
Kafeine 25d21204fb
fix 2018-06-07 10:34:55 +01:00
Kafeine 52f0858ef5
+ Glazunov 2018-06-07 10:31:58 +01:00
Deborah Servili a96a8a4a13 add sigrun ransomware's ransomnotes 2018-06-07 09:33:08 +02:00
Kafeine 178d5219c7
guuid & + VenomKit 2018-06-06 18:00:25 +01:00
Deborah Servili e561e3e4f0 add Sigrun ransomwaremeta data 2018-06-06 16:29:24 +02:00
Deborah Servili e2a25e165d add Sigrun ransomware 2018-06-06 16:12:31 +02:00
Deborah Servili 07f91bcca4 add another cryptomix variant 2018-06-06 15:44:32 +02:00
Deborah Servili 3e91466aea add Brambul worm 2018-06-06 15:07:30 +02:00
Deborah Servili 3e10d0957c add Joanap RAT 2018-06-06 14:34:42 +02:00
Alexandre Dulaunoy 308774755c
add: Iron Backdoor 2018-06-03 18:39:37 +02:00
raw-data 388a2b25b3 [ADD] x2 new info/pwd stealers - Nocturnal Stealer, TeleGrab 2018-06-01 15:59:25 +01:00
raw-data ba6892408b [ADD] NavRAT 2018-06-01 15:09:22 +01:00
raw-data 42bb2175e2 [ADD] DanaBot 2018-06-01 15:08:55 +01:00
Alexandre Dulaunoy 6d5b8de216
Merge branch 'master' of github.com:MISP/misp-galaxy 2018-05-29 21:47:59 +02:00
Alexandre Dulaunoy c08c6af936
chg: Stalker Panda description added 2018-05-29 21:47:04 +02:00
raw-data 8726e0542d [ADD] VPNFilter in tool.json cluster 2018-05-26 23:49:59 +01:00
raw-data b0396e5ea2 [ADD] Pontoeb, WICKED and Brain Food into botnet.json cluster 2018-05-24 16:39:24 +01:00
Raphaël Vinot ca964d9d35 Merge branch 'master' of github.com:MISP/misp-galaxy 2018-05-19 17:58:23 -04:00
Raphaël Vinot 96f3bf1cb8 fix: Duplicate ELECTRUM entry 
Fix #212
 2018-05-19 17:57:51 -04:00
Deborah Servili 22cb1618a5
Merge pull request #214 from Delta-Sierra/master 
update mitre galaxies - add external id and killchain
 2018-05-19 13:21:18 +02:00
Deborah Servili 6c8edd3f61 jq 2018-05-19 13:09:50 +02:00
Deborah Servili d82a76c08f fix scripts for nobile and pre attack attack pattern 2018-05-19 13:09:30 +02:00
Deborah Servili f6d7291e7a jq 2018-05-19 12:57:20 +02:00
Deborah Servili 730353f63d update mitre galaxies - add external id and killchain 2018-05-19 12:56:20 +02:00
Alexandre Dulaunoy 3a7c4e3c57
Merge pull request #211 from eCrimeLabs/master 
Added links in relation to Threat-actor info from Dragos
 2018-05-15 16:17:56 +02:00
Alexandre Dulaunoy 9b888f238a
Merge pull request #209 from raw-data/master 
[ADD] RadRAT, ARS VBS Loader and FlawedAmmyy into rat.json cluster
 2018-05-15 16:17:18 +02:00
Dennis Rand 1ab4e4f4cf Added data related to Dragos Adverseries 2018-05-15 12:06:48 +00:00
Deborah Servili 3d5c697761 add Stalinlocker 2018-05-15 12:27:20 +02:00
Deborah Servili 5b22aa7225 add Mettle botnet 2018-05-14 12:00:22 +02:00
raw-data 0ba6233309 [ADD] RadRAT, ARS VBS Loader and FlawedAmmyy into rat.json cluster 2018-05-11 01:15:35 +01:00
Deborah Servili 5e0bd260d6 update some clusters 2018-05-09 16:12:02 +02:00
Deborah Servili 2b16c86687 add maikspy 2018-05-09 09:52:22 +02:00
Deborah Servili d3f7f7b591 jq~ 2018-05-09 09:34:08 +02:00
Deborah Servili 360a4d4556 add reference for HNS botnet 2018-05-09 09:29:23 +02:00
Deborah Servili 0d745f6c93 add HNS bot net & HPE iLO 4 Ransomware/Wiper 2018-05-09 09:22:29 +02:00
Deborah Servili 394950379b add Kitty malware 2018-05-07 15:27:29 +02:00
Deborah Servili 1c783a1453 update version -oops- 2018-05-07 08:52:15 +02:00
Deborah Servili 9cf976b2c5 update - GandCrab v3 2018-05-07 08:46:31 +02:00
Deborah Servili d6e4c166c5 add an unnamed ransomware 2018-05-04 15:59:37 +02:00
Deborah Servili ba631f1b43 add spymaster pro as rat 2018-05-04 15:12:56 +02:00
Deborah Servili 58e3e5f5d6 add ZooPark campaign 2018-05-04 10:16:01 +02:00
Alexandre Dulaunoy 6b1d7d2201
add: threat actors from Dragos Inc. (based on https://dragos.com/adversaries.html) 2018-05-03 21:22:09 +02:00
Deborah Servili 979c784640 jq 2018-05-03 16:08:27 +02:00
Deborah Servili 83581c62b0 add Rubella Macro Builder 2018-05-03 15:38:06 +02:00
Deborah Servili 434716df86 add GravityRAT 2018-05-03 14:35:20 +02:00
Deborah Servili 55504f93d6 add HOGFISH as APT10 synonym 2018-05-03 11:10:21 +02:00
Deborah Servili 9a800ebec1 add Henbox 2018-05-03 10:57:39 +02:00
Deborah Servili 11f0963468 add Orangeworm, Kwampirs, Iron ransomware and Ton ransomware 2018-04-24 10:20:11 +02:00
Deborah Servili 6bf2004bd5 add Muhstik botnet 2018-04-23 09:26:28 +02:00
Stefan Kelm 0b63cb683b NMCRYPT ransomware 2018-04-20 11:28:02 +02:00
Deborah Servili f95f7b6057 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2018-04-20 10:27:54 +02:00
Deborah Servili 338eb7ab61 jq 2018-04-20 10:26:11 +02:00
Deborah Servili 6e2c0ea809
Update Ransomware galaxy version 2018-04-20 10:18:33 +02:00
Deborah Servili f87da7a3a6 add Xiaoba 2018-04-20 10:13:52 +02:00
Deborah Servili 0e0c806e9e Merge https://github.com/MISP/misp-galaxy 2018-04-19 16:04:18 +02:00
Deborah Servili 473bf61fc7 add some ransomwares 2018-04-19 15:00:30 +02:00
Daniel Roethlisberger 8c861848f8 Add Comnie RAT. 2018-04-17 15:49:05 +02:00
StefanKelm 74610731ee
Added 'Chtonic' synonym 2018-04-16 15:37:23 +02:00
StefanKelm eff4ace398
Remove Chthonic since it's a duplicate (banker.json) 2018-04-16 15:34:59 +02:00
Deborah Servili c785ee6384 add some ransomwares & threat actors 2018-04-16 09:24:11 +02:00
Deborah Servili 1a18ffb3eb add Rovnix 2018-04-11 16:30:58 +02:00
Deborah Servili e4b95abce3 add IcedID reference 2018-04-11 11:59:35 +02:00
Deborah Servili c773597155 add GoScanSSH tool 2018-04-10 15:56:27 +02:00
Deborah Servili 113599bb24 add LockCrypt ransomware 2018-04-10 15:15:08 +02:00
Deborah Servili a11bd66cf3 jq 2018-04-10 10:54:58 +02:00
Deborah Servili ef8b428838 add PUBG ransomware 2018-04-10 10:54:36 +02:00
Deborah Servili 6f3921076a update matrix ransomware 2018-04-09 15:49:11 +02:00
Deborah Servili 20b1508e4b update version 2018-04-09 14:59:12 +02:00
Deborah Servili e67a7b015d update matrix ransomware 2018-04-09 14:52:07 +02:00
Deborah Servili 8596ff3e10 update threat actor galaxy based on https://www.fireeye.com/content/dam/collateral/en/mtrends-2018.pdf 2018-04-09 11:52:12 +02:00
Deborah Servili 386349c607 add BlackRuby& WhiteRose ransomwares (+some fix) 2018-04-06 12:00:57 +02:00
Deborah Servili 47a0fbed8c merge the two Igexin clusters - fix #183 2018-04-05 13:47:09 +02:00
Deborah Servili 2bd3344eb6 add 2 -supposed- wipers 2018-04-05 11:51:13 +02:00
Deborah Servili a0e8e45321 update ransomware galaxy versionC 2018-04-05 10:46:48 +02:00
Deborah Servili 7584c5f2a1 update cryptomix 2018-04-05 10:45:26 +02:00
Deborah Servili b31f2632fd update botnet version 2018-04-05 09:49:57 +02:00
Deborah Servili 73e14c53eb complete hajime botnet 2018-04-04 16:22:50 +02:00
Deborah Servili 572404dcc7 add hajime botnet 2018-04-04 14:41:57 +02:00
Deborah Servili a78972e0ac
Merge pull request #181 from Delta-Sierra/master 
add external_id to values (MITRE galaxies)
 2018-04-04 14:09:49 +02:00
Deborah Servili 8d4053741b jq 2018-04-04 12:54:04 +02:00
Deborah Servili 804fcedb5c add external_id to values 2018-04-03 15:53:17 +02:00
Alexandre Dulaunoy f4d7fe0166
add: SHARPKNOT 2018-03-29 16:31:05 +02:00
Kafeine 6c7d0f8684
+ThreadKit 2018-03-26 18:05:14 +01:00
Raphaël Vinot 24fa5b8b1b Merge branch 'master' of github.com:MISP/misp-galaxy 2018-03-23 10:40:32 +01:00
Raphaël Vinot f6695f5b56 fix: Duplicate UUID in tools 2018-03-23 10:40:21 +01:00
Deborah Servili 0f14c2e563 Merge https://github.com/MISP/misp-galaxy 2018-03-23 08:28:20 +01:00
Deborah Servili 3ae0e5f113 add several tools 2018-03-23 08:27:14 +01:00
StefanKelm cdf5344719
Update mitre-enterprise-attack-intrusion-set.json 2018-03-22 14:32:59 +01:00
StefanKelm 9add19ae7f
Update and rename mitre-entreprise-attack-tool.json to mitre-enterprise-attack-tool.json 2018-03-22 14:03:31 +01:00
StefanKelm a1daa975aa
Update and rename mitre-entreprise-attack-relationship.json to mitre-enterprise-attack-relationship.json 2018-03-22 14:02:30 +01:00
StefanKelm 9d612ba3d9
Update and rename mitre-entreprise-attack-malware.json to mitre-enterprise-attack-malware.json 2018-03-22 14:01:27 +01:00
StefanKelm b9aef43c73
Update and rename mitre-entreprise-attack-intrusion-set.json to mitre-enterprise-attack-intrusion-set.json 2018-03-22 14:00:20 +01:00
StefanKelm 36204644f1
Update mitre-enterprise-attack-course-of-action.json 2018-03-22 13:59:42 +01:00
StefanKelm b619c8fc32
Update and rename mitre-entreprise-attack-course-of-action.json to mitre-enterprise-attack-course-of-action.json 2018-03-22 13:58:39 +01:00
StefanKelm 24930772c5
Update and rename mitre-entreprise-attack-attack-pattern.json to mitre-enterprise-attack-attack-pattern.json 2018-03-22 13:57:45 +01:00
Deborah Servili 011e0e9574 update Android galaxy based on: https://source.android.com/security/reports/Google_Android_Security_2017_Report_Final.pdf - possible duplicates! 2018-03-21 16:17:33 +01:00
Deborah Servili 181d4604a5 add Zenis ransomware 2018-03-21 15:22:21 +01:00
Deborah Servili 8cfd258ee3
Merge branch 'master' into master 2018-03-21 08:31:56 +01:00
Deborah Servili 510347c730 add gamut botnet 2018-03-21 08:29:41 +01:00
Kafeine 9e30ff1345
+Glazunov 2018-03-19 09:23:27 +00:00
Daniel Plohmann (jupiter) 83fd4a9af9 added leviathan 2018-03-17 11:57:10 +01:00
Dennis Rand 080e68a30f Added RoyalCli and RoyalDNS related to APT15 based on information from NCC Group 2018-03-15 22:08:06 +00:00
Alexandre Dulaunoy 468f9dcb9d
Merge pull request #171 from Delta-Sierra/master 
add qwerty ransomware
 2018-03-15 10:47:37 +01:00
Deborah Servili 2e9827d9a3 jq 2018-03-15 10:41:37 +01:00
Deborah Servili 37a0b96a7b add qwertyransomware 2018-03-15 10:40:34 +01:00
eCrimeLabs bfeb9d772c
Malware Used by APT37 
Malware Used by APT37
 2018-03-14 22:11:43 +00:00
eCrimeLabs 84215d0003
Added tools from APT37 
Malware Used by APT37
 2018-03-14 21:53:35 +00:00
Deborah Servili 5fa09c0962 update version 2018-03-12 11:54:29 +01:00
Deborah Servili e6a703e359 jq 2018-03-12 11:53:06 +01:00
Deborah Servili e3c6e7e238 add missing uuid 2018-03-12 11:52:51 +01:00
Deborah Servili 4aa73942e7 add ref for BS2005 2018-03-12 11:46:04 +01:00
Deborah Servili 73eb11fedd update Mirage Threat actor 2018-03-12 10:44:57 +01:00
Deborah Servili 11daa2e1e0 add Nautilus, Neuron and update GandCrab 2018-03-12 10:23:57 +01:00
Deborah Servili 2fc9fb86d2 update GandCrab 2018-03-09 15:35:42 +01:00
Deborah Servili ca7034a117 jq all the things 2018-03-09 14:53:31 +01:00
Deborah Servili 0c1e0b86b5 add missing uuid 2018-03-09 14:39:14 +01:00
Deborah Servili ac8dc7122c add Shipup 2018-03-09 14:34:14 +01:00
Deborah Servili 1b19f99f87 add ghotex 2018-03-09 14:29:24 +01:00
Deborah Servili d2ad0f1c09 add miniflame 2018-03-09 12:20:06 +01:00
Deborah Servili 6096c45da5 add Downloader-FGO 2018-03-09 11:32:31 +01:00
Deborah Servili a415a48d71 add Cheshire Cat -hack.lu video as reference! 2018-03-09 10:47:17 +01:00
Deborah Servili 0ad7f06cf6 add Aurora/Hydraq 2018-03-09 10:18:47 +01:00
Deborah Servili 0cfc8907f3 add Rotinom 2018-03-09 09:25:40 +01:00
Deborah Servili 773d764445 add Exforel 2018-03-09 09:21:32 +01:00
Deborah Servili 58e10c9af4 add RSAUtil and Coldroot 2018-03-07 13:00:07 +01:00
Deborah Servili ee3c858e4f Add TSCookie Malware and RAT 2018-03-06 13:28:28 +01:00
Deborah Servili 3f8b44bbe3 jq 2018-03-01 15:02:48 +01:00
Deborah Servili 227fa8b44f Merge https://github.com/MISP/misp-galaxy 2018-03-01 15:01:49 +01:00
Deborah Servili b3574f880a jq ftw 2018-02-28 16:16:28 +01:00
Deborah Servili d88a4a44dc add uuid to every cluster 2018-02-28 15:37:37 +01:00
Alexandre Dulaunoy 22bf4f951f
fix #161 2018-02-27 19:32:07 +01:00
Deborah Servili 2eea951b71 add extension for Thanatos ransomware 2018-02-27 16:23:13 +01:00
Deborah Servili 63f77a81ec add botnets to galaxy 2018-02-27 16:04:23 +01:00
Deborah Servili bfd74bb54d add Thanatos ransomware 2018-02-27 15:03:26 +01:00
Deborah Servili 8f0e6058b8 Removing duplicates refs - 2 2018-02-23 11:49:32 +01:00
Deborah Servili dd62ea1844 manage duplicate refs - first try 2018-02-23 11:44:17 +01:00
Deborah Servili fd9919e67a jq all the things 2018-02-23 08:38:32 +01:00
Deborah Servili 4ddb598de4 add MITRE Galaxies V2.0 2018-02-21 16:28:11 +01:00
Deborah Servili 384e26a1b4 create botnet galaxy 2018-02-20 15:33:24 +01:00
Deborah Servili 6147b89c4a add ShurL0ckr ransomware 2018-02-20 11:19:55 +01:00
Deborah Servili 42596842a8 add synonym and ref for Emissary Panda (Iron Tiger APT) 2018-02-20 10:37:47 +01:00
Deborah Servili aa9fe74596 jq 2018-02-19 16:35:58 +01:00
Deborah Servili d3d2db7e11 complete gandcrab 2018-02-19 16:27:28 +01:00
Deborah Servili 289e41a35b add gandcrap ransomware + update references 2018-02-19 15:58:47 +01:00
Alexandre Dulaunoy b7e8918193
fix: JSON format 2018-02-14 11:10:44 +01:00
Alexandre Dulaunoy db2b187bc6
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master 2018-02-14 11:06:19 +01:00
Kafeine bbb76373a5
~Sakura description 2018-02-13 11:48:13 +00:00
Kafeine 7155477764
+SPL Exploit Kit, ~Grandsoft 2018-02-13 11:46:24 +00:00
Deborah Servili 3ad7e412a4 add Smominru 2018-02-01 14:29:06 +01:00
Deborah Servili 7d29f57d5b add CrossRat 2018-01-31 11:14:20 +01:00
Alexandre Dulaunoy 4664042400
fix: PureMasuta added to Masuta 2018-01-25 16:06:21 +01:00
Alexandre Dulaunoy 3b61d2c84a
fix: typo in meta field 2018-01-25 15:56:16 +01:00
Alexandre Dulaunoy 1831752530
add ref to Nexus Zeta 2018-01-25 15:43:33 +01:00
Alexandre Dulaunoy 193b474ad2
add: Nexus Zeta is no stranger when it comes to implementing SOAP 
relatedrelated exploit ;-)
 2018-01-25 15:41:47 +01:00
Alexandre Dulaunoy 5070314aae
add: Matsuta IoT botnet added 2018-01-25 15:39:44 +01:00
Daniel Plohmann 6de7c0176d adding dark caracal 2018-01-25 12:54:50 +01:00
Kafeine df47e09457
BlackTDS added 2018-01-24 14:20:50 +00:00
Deborah Servili ddffa49b42 add Digmine 2018-01-15 15:45:26 +01:00
Deborah Servili 8c5eb9e957 add downAndExec 2018-01-15 15:00:25 +01:00
Deborah Servili 8c1583b962 add travle/PYLOT 2018-01-15 14:44:36 +01:00
Deborah Servili 8240934eb5 fix forgotten value Microcin 2018-01-11 16:01:19 +01:00
Deborah Servili 130ad39d4c add macOS malwares 2018-01-11 15:19:18 +01:00
Deborah Servili 80d4fd0164 add monero miner 2018-01-10 15:30:47 +01:00
Alexandre Dulaunoy 59a4fd52ad
fix: Updated description to clearly states that only branded vulnerabilities 2018-01-09 09:23:19 +01:00
Deborah Servili 9dd9810167 rename files + update README.md 2018-01-09 09:20:13 +01:00
Deborah Servili 225ce1f3ee New galaxy Branded Vulnerability 2018-01-09 09:02:29 +01:00
Alexandre Dulaunoy 63b72cdade
add in preventive measures: blacklisting phone numbers 2017-12-28 13:28:49 +01:00
Deborah Servili 9b23956c37 jqallthethings 2017-12-22 10:47:06 +01:00
Deborah Servili d6b16b2177 update Sofacy tools 2017-12-22 10:46:18 +01:00
Deborah Servili f737b7fe0a modify SedKit description 2017-12-22 10:08:54 +01:00
Deborah Servili e787efce72 add SedKit 2017-12-22 10:05:52 +01:00
Deborah Servili 51a4868a3f add "Power"tools 2017-12-21 11:18:32 +01:00
Deborah Servili 56d5ab9afa add satori (Mirai Variant) 2017-12-20 11:25:06 +01:00
Deborah Servili 9aa073a1c4 add PRILEX & CUTLET MAKER 2017-12-19 15:38:33 +01:00
Deborah Servili eb9a49df81 add GratefulPOS 2017-12-19 12:17:42 +01:00
Deborah Servili a9e5cff50f update Android galaxy 2017-12-19 08:56:39 +01:00
Deborah Servili 5f731a428d add source for NewCore RAT 2017-12-18 14:29:34 +01:00
Deborah Servili db8ae5fbfe update OilRig threat actor 2017-12-18 09:26:15 +01:00
Deborah Servili 91e2d56d4d add file spider ransomware 2017-12-15 10:21:23 +01:00
Deborah Servili cfaadb0c71 add OSX.Pirrit 2017-12-15 09:57:39 +01:00
Alexandre Dulaunoy d767e43669
TRISIS is the main name of TRITON as discussed in https://twitter.com/DragosInc/status/941355602512613381 2017-12-14 18:56:36 +01:00
Alexandre Dulaunoy 90e37eb272
TRITON added 2017-12-14 17:13:18 +01:00
Deborah Servili 901d624a52 add SSHDoor 2017-12-14 11:37:05 +01:00
Deborah Servili a2deaed935 add cryptomix variant 2017-12-14 10:58:29 +01:00
Deborah Servili 8836dfdc16 add Quant Loader 2017-12-13 15:51:24 +01:00
Deborah Servili e891373ce8 Add MoneyTaker 2017-12-13 15:15:57 +01:00
Deborah Servili 5cac510818 update threat actor galaxy 2017-12-13 14:57:38 +01:00
Deborah Servili e4d95b9ce8
Merge pull request #133 from Delta-Sierra/master 
add source for BankBot
 2017-12-11 10:39:31 +01:00
Deborah Servili 2c5a116ed5 add source for BankBot 2017-12-11 10:25:41 +01:00
Alexandre Dulaunoy c2e2093f29
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2017-12-10 10:23:37 +01:00