The lure files were downloaded from a phishing website impersonating the Ukrainian World Congress Organization. Both were modified on June 27, 2023, and both tried to communicate with C2's. File name: Overview_of_UWCs_UkraineInNATO_campaign[.]docx[.]doc MD5: d227874863036b8e73a3894a19bd25a0 File name: Letter_NATO_Summit_Vilnius_2023_ENG(1)[.]docx MD5: 00ad6d892612d1fc3fa41fdc803cc0f3 C2: 74.50[.]94.156 C2: 104.234[.]239.26 Domain: ukrainianworldcongress[.]info
0
6
18
5K
2
Download Image