Ukrainian Military-Themed Excel File Delivers Multi-Stage Cobalt Strike Loader

A Ukrainian military-Themed Excel file loaded with malicious macro code is used to launch multi-stage Cobalt Strike Beacon malware on victims' devices, according to FortiGuard Labs and the PSIRT Collective.

TAGS: Excel Macro, Malware, Cobalt Strike, Obfuscation, LNK File

TARGETED COUNTRY: Ukraine

ATT&CK IDS: T1055 - Process Injection, TA0011 - Command and Control, T1053 - Scheduled Task/Job, T1027 - Obfuscated Files or Information, T1104 - Multi-Stage Channels, T1140 - Deobfuscate/Decode Files or Information

Read More:

https://otx.alienvault.com/pulse/63500a9e91356686ec60813b