Wordlist+Wordlist+Mask

[slyexe]

You'll want to use --stdout to output your first 2 wordlist and then pipe a new instance with a mask attack

Code:

hashcat -a 1 -m 0 --stdout  example.dict example.dict

then create your mask attack. see this forum post, very similar concept
https://hashcat.net/forum/thread-11120-p...l#pid57357