1ZRR4H

EMOTET IOC's LATAM (Chile) Dropper Pattern 21-11-2018

Nov 14th, 2018
262
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ##############################
  2. Ultimate EMOTET IOC's LATAM
  3. 1ZRR4H, 21-11-2018, Chile.
  4. ##############################
  5.  
  6. - Dropper: ^(facture|fa|fact|factura|inv|invoice|recibo|boleta|untitled|nuevo)?([_\-\.]+)+(num|nro|no|inv|documento|acuerdo)?([_\-\.]?)(\w{7,10})?(\.)+(doc|pdf)+
  7.  
  8. - Email Subject: ^(factura|invoice|recibo|payment|reminder)?(.*)?(([a-zA-Z0-9]{8,10}))+/gmi
  9.  
  10. Patrón User-Agent de comunicación al C&C:
  11.  
  12. - User-agent: mozilla/4.0 (compatible; msie 7.0; windows nt 6.1; wow64; trident/7.0; slcc2; .net clr 2.0.50727; .net clr 3.5.30729; .net clr 3.0.30729; infopath.3; .net4.0c; .net4.0e)
  13.  
  14. EOF
RAW Paste Data