MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
1,587 Commits
6 Branches
47 Tags
73 MiB
Commit Graph

994 Commits (ee0f793e49912c61f32cf8fb5d13eb6fbaf19307)

Author SHA1 Message Date
Christophe Vandeplas 39ff6b4bbc MITRE sorted 
While dicts were sorted, lists were not yet sorted. This current sort algo is not yet the best, but is a good start. A good sort is needed for better comparison afterwards with automated tools. In a next stage tt will also be needed in the validate_all scripts.
 2018-12-09 08:32:48 +01:00
Deborah Servili bf77e1125a
add Operation Poison Needles 2018-12-07 16:32:09 +01:00
Deborah Servili 79828d7411
add clusters 2018-12-07 13:25:56 +01:00
Deborah Servili 5a725e71ef
add several clusters 2018-12-06 16:13:51 +01:00
Alexandre Dulaunoy ac2b5dbe05
fix: [ransomware] more duplicates removed 2018-12-02 12:00:17 +01:00
Alexandre Dulaunoy 2e8f139daa
fix: [ransomware] removed duplicate values 2018-12-02 11:54:34 +01:00
Deborah Servili be9b4ff40f
add DNSpionage cluster 2018-11-29 16:38:06 +01:00
Deborah Servili ef54489ea9
add everbe rasomnotes 2018-11-29 15:33:39 +01:00
Deborah Servili 6382857ee3
add ransomwares 2018-11-29 15:23:57 +01:00
Deborah Servili c81f128d98
add ransomwares 2018-11-27 15:59:26 +01:00
Deborah Servili 6f255c0999
add Aurora Ransomware metadata 2018-11-26 09:30:54 +01:00
Deborah Servili e5487305f1
add Aurora Ransomware synonym 2018-11-26 08:33:11 +01:00
Deborah Servili 9f5e10abf6
fix version 2018-11-23 16:16:58 +01:00
Deborah Servili b6b1c7171a
Add Rotexy 2018-11-23 16:15:48 +01:00
Deborah Servili dac1c08491
update version 2018-11-23 12:42:41 +01:00
Deborah Servili b50c8bd805
add PNG Dropper 2018-11-23 10:38:36 +01:00
Deborah Servili 1be4a1cedb
add reference for Emotet/Geodo 2018-11-22 09:00:43 +01:00
Deborah Servili 2bf5d46cc4 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2018-11-22 08:59:53 +01:00
Deborah Servili 2f5031b845
add several references for Emotet and others 2018-11-22 08:37:45 +01:00
Deborah Servili de38e7249c
Merge branch 'master' into master 2018-11-19 15:23:45 +01:00
Deborah Servili ce61b2d2dd
update oilrig related clusters + others 2018-11-19 14:56:13 +01:00
Alexandre Dulaunoy eec7693081
chg: uuid fixed 2018-11-18 06:31:04 +01:00
Alexandre Dulaunoy d324a1c39b
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2018-11-18 06:29:50 +01:00
Deborah Servili eb6f6a3f49
fix rat galaxy version 2018-11-16 16:40:23 +01:00
Deborah Servili 77b556d702
jq and add ref in tool galaxy -hit version 100- 2018-11-16 13:11:55 +01:00
Deborah Servili faa16879da
add TheOneSpy 2018-11-16 13:10:21 +01:00
Alexandre Dulaunoy c9fd60d14b
chg: [threat-actor] INDRIK SPIDER added 2018-11-14 20:46:06 +01:00
Deborah Servili ca33f1c2ce Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-11-13 15:25:34 +01:00
Deborah Servili f55277b682
add several rqansomware and HookAds campaign 2018-11-13 12:20:37 +01:00
Alexandre Dulaunoy a505995b79
fix: [ransomware] duplicate removed 2018-11-13 07:12:36 +01:00
Alexandre Dulaunoy 51d3af11fc
chg: [ransomware] duplicate removed 2018-11-13 07:08:49 +01:00
Alexandre Dulaunoy a4c916c916
Merge branch 'master' of github.com:MISP/misp-galaxy 2018-11-13 07:01:56 +01:00
Benoit Sevens 8f8c69134e
Update threat-actor.json 
Add LuckyMouse link
 2018-11-12 13:12:14 +01:00
Deborah Servili 46dba06e40
add/update ransomawares 2018-11-09 16:34:00 +01:00
Deborah Servili 14444e4321
add several tools and refs 2018-11-08 10:39:32 +01:00
Daniel Plohmann 1f6b606f75
added APT38 as (FireEye) alias for Lazarus 
cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.
 2018-11-07 17:19:50 +01:00
Deborah Servili 954264c084
Merge pull request #296 from Delta-Sierra/master 
update ransomware galaxy
 2018-11-07 09:19:23 +01:00
Deborah Servili d41a279c73
update ransomware galaxy 2018-11-05 16:23:10 +01:00
Alexandre Dulaunoy 8ae3214cd1
Merge pull request #295 from Delta-Sierra/master 
update Red Alert 2 Android Banking Trojan
 2018-11-05 12:37:29 +01:00
Deborah Servili 050a94a2c0
jq fix 2018-11-05 11:01:57 +01:00
Deborah Servili ae24b71f45
update version 2018-11-05 10:45:54 +01:00
Deborah Servili 5fd4cfa4ee
update Red Alert 2 Android Banking Trojan 2018-11-05 09:50:10 +01:00
Deborah Servili 7813a29460
Merge pull request #294 from Delta-Sierra/master 
add ransomwares
 2018-10-31 16:05:18 +01:00
Deborah Servili ad07b70a03
add ransomwares 2018-10-31 14:52:40 +01:00
Alexandre Dulaunoy 2465235817
Merge pull request #293 from Delta-Sierra/master 
add Operation EvilTraffic
 2018-10-30 21:02:59 +01:00
Deborah Servili e6b1eec329
add Chalubo botnet (+ jqallthethings) 2018-10-30 14:39:13 +01:00
Deborah Servili 41942d0daf
add Operation EvilTraffic 2018-10-30 13:28:46 +01:00
Deborah Servili 74ff4b957a
add Operation EvilTraffic 2018-10-30 13:28:27 +01:00
Nils Kuhnert bc0bf1ca9f
Corrected DarkHotel threat actor entry 2018-10-29 09:03:30 +01:00
Deborah Servili 6e8abc0712
fix duplicate ref 2018-10-23 15:37:51 +02:00
Deborah Servili af6020077e
add August Stealer 2018-10-23 15:25:37 +02:00
Deborah Servili 4a54044de6
add NukeSped reference 2018-10-22 14:50:57 +02:00
Deborah Servili 32d90a27e1
add GhostMiner 2018-10-22 14:46:44 +02:00
Deborah Servili bd68ee280e Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-22 11:09:37 +02:00
Deborah Servili 504570a298
add tools from https://github.com/misterch0c/shadowbroker 2018-10-22 11:06:25 +02:00
Deborah Servili 4564c5eb37
add DarkPulsar and affiliates + update some refs 2018-10-22 10:14:30 +02:00
Christophe Vandeplas 4232f0b737 chg: further categorization of galaxies 2018-10-19 14:15:20 +02:00
Christophe Vandeplas 9dddc4427c jq 2018-10-19 10:23:09 +02:00
Christophe Vandeplas 6a9a9b7e1b Merge remote-tracking branch 'MISP/master' 2018-10-19 10:18:45 +02:00
Christophe Vandeplas ddccac58c8 chg: categorization of galaxies 
This allows relationships to be created.
 2018-10-19 10:18:14 +02:00
Alexandre Dulaunoy 0ecf34f06e
fix: [malpedia] version 2018-10-18 11:23:48 +02:00
Alexandre Dulaunoy 83c6e6bef1
fix: [malpedia] broken reference has been fixed 2018-10-18 11:17:19 +02:00
Alexandre Dulaunoy 3771c21218
Merge pull request #287 from cvandeplas/master 
fixes an important bug in the gen_relations
 2018-10-18 11:15:17 +02:00
Andras Iklody 66ded6d935
Some minor fixes 2018-10-17 20:59:08 +02:00
Christophe Vandeplas ccebd86eed fix: add missing relations from commit 78c1f07359 2018-10-17 19:18:16 +02:00
Christophe Vandeplas 2b24efb14a fix: add missing relations from commit b857be9cab 2018-10-17 19:15:57 +02:00
Christophe Vandeplas 76b1429f10 fix: add missing relations from commit a81bbe288f 2018-10-17 19:13:35 +02:00
Christophe Vandeplas 84af053761 fix: add missing relations from commit 29beb01dc3 2018-10-17 19:07:01 +02:00
Christophe Vandeplas 873bc873b4 Merge remote-tracking branch 'MISP/master' 2018-10-17 18:28:44 +02:00
Christophe Vandeplas 1e90cac717 fix: intrusion is an actor and not a tool 2018-10-17 18:17:33 +02:00
Alexandre Dulaunoy 9129724343
Merge pull request #286 from Delta-Sierra/master 
Several clusters, refs, others.
 2018-10-17 17:32:45 +02:00
Deborah Servili c8cbb609a2
add GreyEnergy 2018-10-17 16:05:51 +02:00
Christophe Vandeplas ca6c1caa8f fix: jq all the things 2018-10-17 08:26:45 +02:00
Christophe Vandeplas 2bb4df134b chg: removal of older unused relationships 2018-10-17 08:20:12 +02:00
Christophe Vandeplas c51ba2e868 chg: MITRE relationships included in the respective cluster. 2018-10-17 08:08:58 +02:00
Deborah Servili 2ea560f9a7
add refs & synonyms 2018-10-15 12:02:21 +02:00
Deborah Servili c134035a6d
add several refs 2018-10-15 11:33:37 +02:00
Deborah Servili 8d0c87c830
add several refs 2018-10-15 11:28:01 +02:00
Deborah Servili 11a27df82d
add roaming mantis group 2018-10-12 15:50:52 +02:00
Deborah Servili b3109f6aea Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-12 13:55:01 +02:00
Christophe Vandeplas f26a4f2806 fix: minor newline difference after jq_all_the 2018-10-12 12:31:29 +02:00
Christophe Vandeplas f14d616e22 chg: magical mapping with malpedia 2018-10-12 11:00:00 +02:00
Christophe Vandeplas 65eb66a739 fix: automatically fix missing uuids 2018-10-12 10:55:24 +02:00
Christophe Vandeplas 2fbd8ce485 jq sort keys 
Allows automation to edit the files
 2018-10-12 10:35:31 +02:00
Alexandre Dulaunoy 4ff2a45cbb
chg: [malpedia] duplicate urls removed 2018-10-10 22:18:32 +02:00
Alexandre Dulaunoy 2d2749ccea
jq all the things 2018-10-10 22:12:59 +02:00
Steffen Enders 125f676d17
Updated malpedia.json to the current state 
Fetched the new malpedia galaxy cluster from https://malpedia.caad.fkie.fraunhofer.de/api/get/misp - this includes an additional ~120 new families.
 2018-10-10 17:31:27 +02:00
Deborah Servili 4c367737ac
add magecart ref 2018-10-10 14:52:16 +02:00
Deborah Servili ec6b04cf6a
add SAVEfiles ransomware 2018-10-10 14:05:24 +02:00
Deborah Servili ed5aa150a7
update version 2018-10-09 11:35:17 +02:00
Deborah Servili 510a37084c
update matrix ransomware 2018-10-08 16:26:58 +02:00
Deborah Servili 5fb9db8282
add Triout Android Malware 2018-10-05 16:21:01 +02:00
Deborah Servili 655b1619e4 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-05 16:06:25 +02:00
Deborah Servili 58a86e4e26
fix failed copy-paste 2018-10-05 15:53:03 +02:00
Alexandre Dulaunoy 8149960aa3
Merge pull request #276 from Delta-Sierra/master 
add CoalaBot + Kraken Cryptor Ransmware + refs
 2018-10-05 15:52:04 +02:00
Davide Arcuri 253fbed356 Added Malpedia Galaxy 
based on malpedia git repo

Co-Authored-By: garanews <garanews@users.noreply.github.com>
 2018-10-05 14:30:31 +02:00
Deborah Servili 80bf2f5556
jq 2018-10-05 12:04:13 +02:00
Deborah Servili 06c4869125
add CoalaBot + Kraken Cryptor Ransmware + refs 2018-10-05 11:09:54 +02:00
Deborah Servili 9225666b92
add CoalaBot + Kraken Cryptor Ransmware + refs 2018-10-05 11:09:45 +02:00
Alexandre Dulaunoy ecba2dbdbf
Merge pull request #274 from Delta-Sierra/master 
Refs updates
 2018-10-04 17:24:57 +02:00
Deborah Servili 7cf37a57f1
add Persirai botnet 2018-10-04 14:17:16 +02:00
Deborah Servili 50fecccf39
update Torii botnet 2018-10-04 13:44:32 +02:00
Deborah Servili 138a4e6f9e
add ref for Torii botnet 2018-10-04 13:41:27 +02:00
Deborah Servili b45b4ce0b1
add refs 2018-10-04 12:01:26 +02:00
Alexandre Dulaunoy 276992f180
Merge pull request #273 from Delta-Sierra/master 
update synonyms & attributions
 2018-10-04 11:17:19 +02:00
Deborah Servili 2893d715d6
Add ZEBROCY tool 2018-10-04 10:52:40 +02:00
Deborah Servili 5bcf34a953
update regarding https://twitter.com/adulau/status/1047764090410737664 2018-10-04 10:28:22 +02:00
Deborah Servili c78416eee1
update synonyms & attributions 2018-10-04 10:09:34 +02:00
Deborah Servili 123099cd6d
Merge pull request #272 from Delta-Sierra/master 
New clusters based on CIG Circular 66 – FASTCash ATM Cash Out Campaign
 2018-10-03 16:38:33 +02:00
Deborah Servili 4d68b1c205
add NukeSped 2018-10-03 16:28:50 +02:00
Deborah Servili 3dfe8a5a34 add FASTCash 2018-10-03 15:09:14 +02:00
Alexandre Dulaunoy 63b777fc9e
Merge pull request #271 from Delta-Sierra/master 
Several updates
 2018-10-01 21:51:11 +02:00
Deborah Servili 403f162451
add ref for magecart 2018-10-01 11:54:07 +02:00
Deborah Servili 35582f7ed5
new threat actors & tools 2018-10-01 11:52:40 +02:00
Alexandre Dulaunoy 2402c7d98f
chg: [tool] NOKKI added 
ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-new-konni-malware-attacking-eurasia-southeast-asia/
 2018-09-29 09:01:47 +02:00
Deborah Servili 3649e03ad5 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-09-28 16:28:16 +02:00
Deborah Servili f828c8f79e
add synonym 2018-09-28 16:18:54 +02:00
Deborah Servili a27534cfa1
add refs 2018-09-28 15:40:00 +02:00
Alexandre Dulaunoy 49fe210812
Merge pull request #270 from Delta-Sierra/master 
new clusters, relations and information
 2018-09-28 12:57:13 +02:00
Deborah Servili 97581d7185
jq 2018-09-28 11:20:38 +02:00
Deborah Servili fbf21487cf
new clusters and informtion 2018-09-28 11:08:21 +02:00
Alexandre Dulaunoy 46eddf1874
chg: [botnet] Torii added 2018-09-27 15:43:49 +02:00
Deborah Servili 78c1f07359
new ransomware and relations 2018-09-27 15:42:20 +02:00
Nex 014aa325b7 Added missing country values 2018-09-26 23:05:46 +02:00
Deborah Servili 29beb01dc3
add relationships on Mirai 2018-09-24 16:06:36 +02:00
Deborah Servili f7e10cb38d
add references 2018-09-24 14:58:21 +02:00
Deborah Servili 77897be97e
add BusyGasper android spyware 2018-09-24 12:12:41 +02:00
Deborah Servili 2bc8e1e719
add Cobalt Dickensthreat actor 2018-09-24 11:51:09 +02:00
Deborah Servili 69c5fc30e5
add remcos ref 2018-09-24 11:07:17 +02:00
Deborah Servili 5a1734f170
update version 2018-09-21 11:16:36 +02:00
Deborah Servili 3c7e367cbf
fix field mistake 2018-09-21 11:14:19 +02:00
Deborah Servili 1cee9d71e0
update Lazarus group cluster 2018-09-20 15:38:32 +02:00
Deborah Servili 6d43d52731
new unnamedthreat actor 2018-09-20 13:24:11 +02:00
Deborah Servili d0864a6531
new threat actors 2018-09-20 12:10:20 +02:00
Deborah Servili 0a724bee3d
merge 2018-09-19 16:01:46 +02:00
Deborah Servili 3f22dbd17d
add notpetya and update jadeRAT 2018-09-19 15:06:43 +02:00
Deborah Servili 058f778e61
add references 2018-09-19 09:04:04 +02:00
Alexandre Dulaunoy 79146b9d10
fix: array in synonyms (MISP accepts it but not the schema ;-) 2018-09-19 07:35:35 +02:00
Alexandre Dulaunoy 6105522453
chg: [threat-actor] Iron Group added 
ref: https://www.intezer.com/iron-cybercrime-group-under-the-scope-2/
 2018-09-19 07:08:16 +02:00
Alexandre Dulaunoy 4ae0ccd192
chg: [tool] Xbash added 
ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-xbash-combines-botnet-ransomware-coinmining-worm-targets-linux-windows/
 2018-09-19 07:03:56 +02:00
Alexandre Dulaunoy 8238bd5eb1
Merge pull request #263 from botherder/bahamut 
Added Bahamut to threat actors list
 2018-09-19 06:46:26 +02:00
Deborah Servili fd960bfc1b
Add magentocore malware 2018-09-18 23:10:33 +02:00
Nex f0383758fc Added Bahamut to threat actors list 2018-09-18 11:27:32 +02:00
Alexandre Dulaunoy fe60e58f5b
Merge pull request #262 from botherder/mythic-leopard 
Added additional name to C-Major
 2018-09-18 11:25:58 +02:00
Nex 1e502a494e Added additional name to C-Major 2018-09-18 11:18:42 +02:00
Nex ee7f609397 Removed duplicates 2018-09-18 11:16:00 +02:00
Alexandre Dulaunoy 88c9d8d9f6
Merge pull request #259 from botherder/country-sync 
Synced country codes with suspected state sponsor
 2018-09-17 18:18:00 +02:00
Nex be0dd94c90 Synced country codes with suspected state sponsor 2018-09-17 16:26:14 +02:00
Nex c2ea505459 Merged Transparent Tribe in C-Major 2018-09-17 16:11:18 +02:00
Deborah Servili ff9409e164
add blacknurse logo 2018-09-13 12:42:01 +02:00
Deborah Servili 1dcf2e50a7
add blacknurse 2018-09-13 12:33:19 +02:00
Deborah Servili 17d3959445
add Crypt0saur ransomware 2018-09-13 11:34:57 +02:00
Deborah Servili 0843fdfb23
adding and updating clusters 2018-09-13 09:03:41 +02:00
Deborah Servili 039fc91bd6
add description for sigma ransomware 2018-09-12 14:27:09 +02:00
Deborah Servili a73424139f
fix versions 2018-09-12 14:26:44 +02:00
Deborah Servili f107563cad
add ref for operation Applejeus 2018-09-12 09:34:16 +02:00
Deborah Servili cb5fa5e822
fix version 2018-09-10 14:21:14 +02:00
Deborah Servili c92dc15937
add Operation AppleJeus 2018-09-10 14:13:09 +02:00
Deborah Servili a81bbe288f
fix some relations 2018-09-10 12:27:40 +02:00
Deborah Servili 40d5cca20f
clusters 2018-09-07 16:03:40 +02:00
Deborah Servili addda6c545
more clusters~ 2018-09-05 16:39:33 +02:00
Deborah Servili 14024efbf1
add CamuBot Banker Trojan 2018-09-05 09:19:35 +02:00
Deborah Servili 5866b660c8
jq~ 2018-09-05 08:29:08 +02:00
Deborah Servili fb328b0ef4
add ransomwares 2018-09-05 08:20:24 +02:00
Deborah Servili 0a9e91766b Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-09-04 10:18:07 +02:00
Deborah Servili 912e91a5f5
add ransomware 2018-09-04 09:43:58 +02:00
Alexandre Dulaunoy 0acc41131d
"jq all the thing (tm)" 2018-09-01 11:58:52 +02:00
Alexandre Dulaunoy e55f91b7ac
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master 2018-09-01 11:56:10 +02:00
Kafeine ac94f367b1
+ Fallout 2018-09-01 10:07:46 +02:00
Kafeine 21cf5ec957
Hunter EK > Active 2018-08-30 22:47:00 +02:00
Kafeine 85130f264d
Adding Underminer EK 2018-08-30 17:27:59 +02:00
Kafeine afa3fb4cfd
Status from Terror, Bingo and Astrum 2018-08-30 17:08:37 +02:00
Kafeine 67e9ef2719
Adapting to modification from Misp repository 2018-08-30 17:04:08 +02:00
Deborah Servili f14dd27315
add cfr data 2018-08-27 15:29:16 +02:00
Deborah Servili d1940b6a69
Update microsoft-activity-group.json version 2018-08-27 08:38:22 +02:00
Deborah Servili 9efca2fd79 more clusters 
Signed-off-by: Deborah Servili <deborah.servili@gmail.com>
 2018-08-24 16:11:16 +02:00
Deborah Servili c943d1c9d1
add APT28/STRONTIUM refs 2018-08-22 09:59:40 +02:00
Deborah Servili afea4ca5e7 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-08-22 09:03:26 +02:00
Alexandre Dulaunoy f8c5640613
chg: [tool] biscuit biscvt tool BISKVIT 
ref: https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html
 2018-08-21 10:48:47 +02:00
Alexandre Dulaunoy cd76f19f52
chg: [threat-actor] APT-C-35 actor added 
ref: https://ti.360.net/blog/articles/latest-activity-of-apt-c-35/
 2018-08-15 20:25:57 +02:00
Deborah Servili 3940964956
update Dharma Ransomware 2018-08-14 15:56:09 +02:00
Deborah Servili d5f35d94dc
version update 2018-08-14 12:21:50 +02:00
Deborah Servili f3c02ad195
merge black ruby duplicate (delete the newer) 2018-08-14 12:20:29 +02:00
Deborah Servili 31142b41ac
merge 2018-08-14 12:09:21 +02:00
Deborah Servili a28c50203e
fix 2018-08-14 12:07:12 +02:00
Deborah Servili 2081dc1627
resolve merge confilct -I hope- 2018-08-14 12:06:42 +02:00
Deborah Servili 4e911b2c17
Merge branch 'master' into master 2018-08-14 11:43:59 +02:00
Deborah Servili 7829e0fab6
fix typo and missing uuid 2018-08-14 11:41:06 +02:00
Deborah Servili a646a835fe
add Rosenbridge backdoor 2018-08-14 10:09:26 +02:00
Christophe Vandeplas 88162aa44e chg: [mapping] Generated automatic mapping between clusters 2018-08-14 09:35:22 +02:00
Christophe Vandeplas 5478f0aa45 no change: dump files with sort_keys=True 
This is needed to keep better track of the changes when other tools load and save the json files.
 2018-08-13 17:06:29 +02:00
Christophe Vandeplas 021107e597 fix: [threat-actor] added missing uuids 2018-08-13 17:00:40 +02:00
Deborah Servili b100b0cedd
add KEYPASS ransomware 2018-08-13 15:50:09 +02:00
Deborah Servili f1dcb05576
Merge pull request #246 from Delta-Sierra/master 
add Skygofree android spyware
 2018-08-13 12:28:30 +02:00
Deborah Servili 56fe9eb63c
add Skygofree android spyware 2018-08-13 12:20:16 +02:00
Alexandre Dulaunoy 9059a85eed
chg: [tool] KEYMARBLE malware added 
ref: https://www.us-cert.gov/ncas/analysis-reports/AR18-221A
 2018-08-11 16:14:39 +02:00
Deborah Servili 27805ca768
add tools used by SamSam 2018-08-09 15:55:36 +02:00
Deborah Servili 597e7bacb9
add ransomwares 2018-08-09 13:53:04 +02:00
Alexandre Dulaunoy 6620b5575a
fix: [threat-actor] related is an array of JSON objects 2018-08-09 07:53:42 +02:00
Alexandre Dulaunoy 1429b60555
chg: [threat-actor] jq document 2018-08-08 16:38:39 +02:00
Deborah Servili ebc7287e14
update schema 2018-08-08 16:12:29 +02:00
Deborah Servili 33a300b773
tags is an array 2018-08-08 15:59:44 +02:00
Deborah Servili b857be9cab
relationship system - v2 2018-08-08 15:51:22 +02:00
Deborah Servili 050a864be0
update some clusters and try to add a relationship system 2018-08-08 14:20:38 +02:00
Deborah Servili 84adb50f0f
add RedAlpha campaigns 2018-08-07 13:55:05 +02:00
Deborah Servili b7de06ffcc
delete forgotten conflict marker 2018-08-06 08:49:44 +02:00
Deborah Servili 010df0a2b6
resolve merge conflict 2018-08-06 08:48:21 +02:00
Deborah Servili def23775e5
resolve merge conflict 2018-08-06 08:45:03 +02:00
Nils Kuhnert ab49b58b02
Added DarkHydrus 2018-08-06 08:33:34 +02:00
Nils Kuhnert 4654f51889
Two small typos 2018-08-05 15:09:38 +02:00
Deborah Servili e5b185deee
Merge branch 'master' into master 2018-08-03 16:11:16 +02:00
Deborah Servili 35aa8ba34e
delete duplicate gorgon group 2018-08-03 16:08:43 +02:00
Deborah Servili a9a71ef84c
more clusters 2018-08-03 15:58:54 +02:00
Alexandre Dulaunoy b3701b6b34
chg: [threat-actor] The Gordon Group added 
ref: https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/
 2018-08-03 10:26:52 +02:00
Alexandre Dulaunoy a0dfdd65ae
chg: [rat] Hallaj PRO Rat added 
ref: https://securelist.com/attacks-on-industrial-enterprises-using-rms-and-teamviewer/87104/
misp-event: 5b63f5e4-bf24-4f46-8340-48fc02de0b81
 2018-08-03 08:34:55 +02:00
Alexandre Dulaunoy 3da005a3f3
fix: jq all the things(tm) 2018-08-02 15:15:47 +02:00
Alexandre Dulaunoy 1fdf47d509
fix: [threat-actor] synonyms are always arraus 2018-08-02 15:13:18 +02:00
Alexandre Dulaunoy ece56dff38
chg: [threat-actor] leafminer - RASPITE added 2018-08-02 15:08:39 +02:00
Alexandre Dulaunoy c232b3dd5a
chg: [tool] added based on Carbanak tooling description from Crowdstrike 
ref: https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/
 2018-08-02 10:30:47 +02:00
Alexandre Dulaunoy 43fa95df7a
chg: [threat-actor] new reference to CARBON SPIDER/Carbanak 2018-08-02 10:03:18 +02:00
Alexandre Dulaunoy 4cf84858e3
chg: [tool] Bisonal malware added (new variant with encryption capabilities) 2018-07-31 15:26:11 +02:00
Deborah Servili e7d2541929 add Kronos Banking Trojan 2018-07-25 09:46:46 +02:00
Deborah Servili 381f7e4a19 Add CFR.org metadata into the galaxy - part 2 2018-07-25 09:08:16 +02:00
Deborah Servili 28456545be Merge https://github.com/MISP/misp-galaxy 2018-07-16 09:16:13 +02:00
Alexandre Dulaunoy 98db303047
chg: [threat-actor] The Big Bang campaign/group added 2018-07-10 08:49:00 +02:00
Alexandre Dulaunoy 43a2c7f0ef
chg: [botnet] Xor DDoS added 2018-07-09 14:25:19 +02:00
raw-data 77cfaa8221 [add] new backdoor galaxy and cluster 2018-07-06 20:09:52 +01:00
Raphaël Vinot e5939e3248 Merge branch 'master' of github.com:MISP/misp-galaxy 2018-07-06 15:25:09 +02:00
Raphaël Vinot 6f7a7921ae new: Add entries from Bambenek Consulting 2018-07-06 15:25:05 +02:00
raw-data fa8d0e35f6 [add] x1 new entry in stealer.json - AZORult 2018-07-06 11:00:11 +01:00
Deborah Servili cae0f7e1ad merging attempt 2018-06-29 16:39:34 +02:00
Deborah Servili 8c51ef98b3 add cfr related informations -still in progress- 2018-06-29 16:36:58 +02:00
Deborah Servili fb6b01cc95
Merge branch 'master' into master 2018-06-27 09:39:28 +02:00
Deborah Servili b1aac6b35b cfr update -in progress + add clusters associated to RANCOR 2018-06-27 09:37:43 +02:00
Alexandre Dulaunoy 1bd0fb34d7
Merge pull request #233 from Delta-Sierra/master 
Add CFR.org metadata into the galaxy - Test
 2018-06-26 14:26:18 +02:00
Deborah Servili 6f9e639981 add cfr prefix for cfr data - test 2018-06-26 10:07:14 +02:00
Deborah Servili 1cd6bddf0c Add CFR.org metadata into the galaxy - Test 2018-06-26 09:40:13 +02:00
Deborah Servili 3838efb0bb some updates 2018-06-26 09:26:32 +02:00
raw-data f649af8ba5 [ADD] x1 new entry in tool.json - Koadic 2018-06-25 15:59:30 +01:00
raw-data b3dffeb8d4 [ADD] x2 new rat - Sisfader, SocketPlayer 2018-06-25 15:46:42 +01:00
raw-data 0920d13c05 [ADD] banker.json version bump 2018-06-25 15:41:32 +01:00
raw-data b382425d9c [ADD] x2 new banker - Backswap, Karius 2018-06-25 15:14:56 +01:00
Nils Kuhnert ed26cfb042
Updated APT1 report link 2018-06-22 13:49:05 +02:00
Deborah Servili 8ebde0540a
Update cert-eu-govsector.json 2018-06-22 12:50:32 +02:00
Deborah Servili e088194ea9
fix typo in type 2018-06-22 12:45:39 +02:00
Andras Iklody 8e014674af
Fixed typo 2018-06-20 09:45:16 +02:00
Deborah Servili dcda058944 update verion 2018-06-20 09:36:36 +02:00
Deborah Servili e18fdf42da add Thrip as threat actor 2018-06-20 09:30:15 +02:00
Deborah Servili dcd159f8ed add olympic destroyer 2018-06-19 15:26:40 +02:00
Deborah Servili 92cbd29091 add severals ransomware 2018-06-19 13:04:32 +02:00