Droogy

# extract attachments and URLs (from e-mail body) from Outlook .eml files
# 
# 1. dump all mail samples into folder called Mail/
# 2. create empty folder "Attachments/" 
# 3. run tool from root of both folders

import os
import re
from independentsoft.msg import Message

Droogy

#!/usr/bin/env python3

import requests
import pandas as pd

df = pd.read_csv("https://raw.githubusercontent.com/drb-ra/C2IntelFeeds/master/C2_configs/cobaltstrike.csv", usecols=["FirstSeen", "ip"])
df.drop_duplicates(subset="ip").to_csv("C2_masterlist.csv", index=False)

Droogy

import "pe"
import "hash"
import "math"
import "time"

rule Gootloader_container {
   meta:
      description = "Gootloader Dropper Container"    
      author = "Droogy"