seem like a new delphi Zebrocy variant Nice Hunting

#APT #CloudAtlas Таможенное регулирование на предприятии.doc ms-update[.]org/politic8stylist1stultification8sadomasochism2

#APT34 #oilrig #RDAT SWSNMPService.exe 8578a659b5bfea526915344de0a45cf5

#APT? What's this? Телефони ос.doc ab5c46281491ec4494543bb949e15579

#APT #Lazarus LNK 59c328cd766f6ec0c9141bca7da6b807 dshellelink.gcloud-share[.]com/2WbF2gpWx/1gdySGDcFWF7Xfaisnd5Dz4+hh2xCZBlg=

#PatchWork #APT 37c6636ab9a11bc8d585cc1f56842beb 185.157.78.135:4040

#APT #Kimsuky ec3f771c71a24c165697e26e136daa4a www.inonix[.]co[.]kr/kor/page/product/_notes/list.php?query=1

#APT32 23520acba030455e7c6062c922cb9b9b Connect pipe... Maybe Used in Lateral movement?

#APT34 #oilrig 63ff31ede9713c10ba6b6f965167cbbd ab25014c3d6f77ec5880c8f9728be968 e7737a2e170459905216622f2d43e4da host:"mail.army.gov[.]lb" username:"sig.dir.logistic" password:"P@ssw0rdSigL0g" to:"[email protected]"

#APT #bitter c1a1e1946e0d750087e57ac67a5c3ce4 http://otx.gxwxtvonline[.]com/OtPefhePbvw/datarcvoninfile.php?idata=15661

#APT 8e57f0d1c879f23a5c4c9bfb7c72130e Maybe Attack oconus.navy.mil About Covid Guidelines https://advancementpass[.]com/downloads/flankspeed