D956e2ff1b22ccee2c5d9819128103d4c31ecefde3ce463a6dea19ecaaf418a1 - Yara Rule - RTF 피싱 캠페인 CVE 2017-0199 활용, 도메인 2BUNNYDOTCOM을 가리키기 위해

Yara Rule - RTF 피싱 캠페인 CVE 2017-0199 활용, 도메인 2BUNNYDOTCOM을 가리키기 위해 관련 IOC 44개 발견

Yara 정의.

Neo23x0
Yara Rule - Rtf Phishing Campaign leveraging the CVE 2017-0199 exploit, to point to the domain 2bunnyDOTcom

Yara definition.
https://github.com/Neo23x0/signature-base/commit/374b7c084c68a863eac92feed5bf3eedfba41ddb