Skip to content

Commit

Permalink
chore(fp): Update Spynote malware name
Browse files Browse the repository at this point in the history
  • Loading branch information
thehappydinoa committed Oct 18, 2023
1 parent e7a3ff5 commit d66dd71
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions fingerprints.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -107,30 +107,30 @@ tags: [C2, "Artemis Rat"]
name: "NimPlant"
censys_query: 'services.http.response.headers.Server: "NimPlant C2 Server"'
censys_virtual_hosts: true
malware_name: win.nimplant
malware_name: "win.nimplant"
confidence_level: 100
tags: [C2]
---
name: "Gotham Stealer"
censys_query: 'services.http.response.html_title: "Gotham Stealer"'
censys_virtual_hosts: true
malware_name: unknown
malware_name: "unknown"
confidence_level: 100
tags: [C2, stealer, GothamStealer]
---
name: "BlackNET"
censys_query: 'services.http.response.html_title: "BlackNET - Login"'
censys_virtual_hosts: true
malware_name: win.blacknet_rat
malware_name: "win.blacknet_rat"
confidence_level: 100
tags: [C2, RAT]
---
name: "Spynote"
censys_query: services.http.response.html_title="BABYEON"
censys_virtual_hosts: true
malware_name: unknown
malware_name: "apk.spynote"
confidence_level: 100
tags: [C2, Spynote]
tags: [C2]
---
name: "DarkGate"
censys_query: "services.service_name: DARKGATE"
Expand All @@ -157,7 +157,7 @@ name: "Pikabot"
censys_query: 'services: (jarm.fingerprint="21d19d00021d21d21c21d19d21d21dd188f9fdeea4d1b361be3a6ec494b2d2"
and port: 5000)'
censys_virtual_hosts: false
malware_name: win.pikabot
malware_name: "win.pikabot"
confidence_level: 75
tags: [C2]
---
Expand Down

0 comments on commit d66dd71

Please sign in to comment.