Dc9b5e8aa6ec86db8af0a7aa897ca61db3e5f3d2e0942e319074db1aaccfdc83 - Yara Rule - RTF 피싱 캠페인 CVE 2017-0199 활용, 도메인 2BUNNYDOTCOM을 가리키기 위해

Yara Rule - RTF 피싱 캠페인 CVE 2017-0199 활용, 도메인 2BUNNYDOTCOM을 가리키기 위해 관련 IOC 44개 발견

Yara 정의.

Neo23x0
Yara Rule - Rtf Phishing Campaign leveraging the CVE 2017-0199 exploit, to point to the domain 2bunnyDOTcom

Yara definition.
https://github.com/Neo23x0/signature-base/commit/c74c1df7970007e5419cadf02d5bebb9197aea9f