Regular Expressions 101

Community Patterns

Ursnif URIs

0

Regular Expression
PCRE (PHP <7.3)

@
/(?:images)(?:/[0-9A-Za-z_]+){6,14}\.(?:avi|bmp|gif)$
@
gmi

Description

Matching on the Ursnif C2 URI structure.

Submitted by Damian Torres - 5 years ago