628d316a983383ed716e3f827720915683a8876b54677878a7d2db376d117a24 - Yara Rule - RTF 피싱 캠페인 CVE 2017-0199 활용, 도메인 2BUNNYDOTCOM을 가리키기 위해

Yara Rule - RTF 피싱 캠페인 CVE 2017-0199 활용, 도메인 2BUNNYDOTCOM을 가리키기 위해 관련 IOC 44개 발견

Yara 정의.

Neo23x0
Yara Rule - Rtf Phishing Campaign leveraging the CVE 2017-0199 exploit, to point to the domain 2bunnyDOTcom

Yara definition.
https://github.com/Neo23x0/signature-base/commit/c74c1df7970007e5419cadf02d5bebb9197aea9f