Skip to content

Commit

Permalink
fix spelling mistake
Browse files Browse the repository at this point in the history
  • Loading branch information
mthaxton committed Apr 18, 2024
1 parent 365fcc1 commit c32047c
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion packs/win_malware.conf
Original file line number Diff line number Diff line change
Expand Up @@ -419,7 +419,7 @@
"query": "SELECT object_name, object_type FROM winbaseobj WHERE object_type='Mutant' AND object_name LIKE '%cAcTuS'",
"interval": 86400,
"snapshot": true,
"description": "A mutex associated with Cactus ransomware was detected. Cactus is a ransomware operation that began to rise to promenance in late 2023. Threat Actors using Cactus have demanded payment to recover the encrypted files and threaten public disclosure of stolen files if victims do not pay.",
"description": "A mutex associated with Cactus ransomware was detected. Cactus is a ransomware operation that began to rise to prominence in late 2023. Threat Actors using Cactus have demanded payment to recover the encrypted files and threaten public disclosure of stolen files if victims do not pay.",
"platform": [
"windows"
]
Expand Down
2 changes: 1 addition & 1 deletion win_malware/cactus_ransomware_mutex.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ cactus_ransomware_mutex:
query: 'SELECT object_name, object_type FROM winbaseobj WHERE object_type="Mutant" AND object_name LIKE "%cAcTuS"'
interval: 86400
snapshot: true
description: A mutex associated with Cactus ransomware was detected. Cactus is a ransomware operation that began to rise to promenance in late 2023. Threat Actors using Cactus have demanded payment to recover the encrypted files and threaten public disclosure of stolen files if victims do not pay.
description: A mutex associated with Cactus ransomware was detected. Cactus is a ransomware operation that began to rise to prominence in late 2023. Threat Actors using Cactus have demanded payment to recover the encrypted files and threaten public disclosure of stolen files if victims do not pay.
references:
- https://www.shadowstackre.com/analysis/cactus
- https://www.virustotal.com/gui/file/c49b4faa6ac7b5c207410ed1e86d0f21c00f47a78c531a0a736266c436cc1c0a
Expand Down

0 comments on commit c32047c

Please sign in to comment.