diff --git a/automated_detection_testing/requirements.txt b/automated_detection_testing/requirements.txt index e71478d27f..a621c8bc1b 100644 --- a/automated_detection_testing/requirements.txt +++ b/automated_detection_testing/requirements.txt @@ -30,7 +30,7 @@ gitdb==4.0.5 GitPython==3.1.12 identify==1.5.13 idna==2.8 -importlib-metadata==3.3.0 +importlib-metadata==3.4.0 Jinja2==2.10.3 jmespath==0.10.0 lockfile==0.12.2 @@ -62,7 +62,7 @@ python-daemon==2.2.4 python-dateutil==2.8.1 python-terraform==0.10.1 pywinrm==0.4.1 -PyYAML==5.3.1 +PyYAML==5.4 requests==2.25.1 requests-ntlm==1.1.0 s3transfer==0.3.4 diff --git a/lookups/ransomware_extensions.csv b/lookups/ransomware_extensions.csv index 042da753dc..0f003c3d8f 100644 --- a/lookups/ransomware_extensions.csv +++ b/lookups/ransomware_extensions.csv @@ -18,7 +18,6 @@ Extensions,Name .locked,ApocalypseVM .locky,AutoLocky .adr,BaksoCrypt -,Bandarchor .bart.zip,Bart .bart,Bart .perl,Bart @@ -117,9 +116,7 @@ Extensions,Name .lock93,Lock93 .crime,Lortok .oor,LowLevel04 -,Mabouia .magic,Magic -,MaktubLocker .Lock,MIRCOP .fucked,MireWare .fuck,MireWare @@ -266,7 +263,6 @@ Extensions,Name .vault,VaultCrypt .xort,VaultCrypt .trun,VaultCrypt -,VenisRansomware .Venusf,VenusLocker .Venusp,VenusLocker .CrySiS,Virus-Encoder diff --git a/lookups/ransomware_extensions_lookup.yml b/lookups/ransomware_extensions_lookup.yml index 358ecc7c49..eed0adad33 100644 --- a/lookups/ransomware_extensions_lookup.yml +++ b/lookups/ransomware_extensions_lookup.yml @@ -3,3 +3,4 @@ description: A list of file extensions that are associated with ransomware filename: ransomware_extensions.csv min_matches: 1 name: ransomware_extensions_lookup +case_sensitive_match: 'false' \ No newline at end of file diff --git a/requirements.txt b/requirements.txt index 52482216c1..bbad62494d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,7 +15,7 @@ gitdb==4.0.5 humanfriendly==9.1 identify==1.5.13 idna==2.10 -importlib-metadata==3.3.0 +importlib-metadata==3.4.0 importlib-resources==4.1.1 Jinja2==2.11.2 jsonschema==3.2.0 @@ -27,7 +27,7 @@ pre-commit==2.9.3 pyrsistent==0.17.3 python-dateutil==2.8.1 pytz==2020.5 -PyYAML==5.3.1 +PyYAML==5.4 requests==2.25.1 scandir==1.10.0 semantic-version==2.8.5