From 1134ecaa6ac673490e003b4821a12b7f8d4532de Mon Sep 17 00:00:00 2001
From: caseysmithrc <30840394+caseysmithrc@users.noreply.github.com>
Date: Tue, 14 Nov 2017 10:06:41 -0700
Subject: [PATCH 01/10] updated
---
ARTifacts/Adversary/APT32/APT32.md | 3 +
ARTifacts/Adversary/APT32/APT32Lure-MHT.doc | 8615 +++++++++++++++++
.../Chain_Reactions/chain_reaciton_apt32.bat | 21 +
3 files changed, 8639 insertions(+)
create mode 100644 ARTifacts/Adversary/APT32/APT32.md
create mode 100755 ARTifacts/Adversary/APT32/APT32Lure-MHT.doc
create mode 100644 ARTifacts/Chain_Reactions/chain_reaciton_apt32.bat
diff --git a/ARTifacts/Adversary/APT32/APT32.md b/ARTifacts/Adversary/APT32/APT32.md
new file mode 100644
index 00000000..d8be2405
--- /dev/null
+++ b/ARTifacts/Adversary/APT32/APT32.md
@@ -0,0 +1,3 @@
+### Group: APT32, OceanLotus Group
+[APT32](https://attack.mitre.org/wiki/Group/G0050)
+
diff --git a/ARTifacts/Adversary/APT32/APT32Lure-MHT.doc b/ARTifacts/Adversary/APT32/APT32Lure-MHT.doc
new file mode 100755
index 00000000..1c3bb304
--- /dev/null
+++ b/ARTifacts/Adversary/APT32/APT32Lure-MHT.doc
@@ -0,0 +1,8615 @@
+MIME-Version: 1.0
+Content-Type: multipart/related; boundary="----=_NextPart_01D35D2D.277E81B0"
+
+This document is a Single File Web Page, also known as a Web Archive file. If you are seeing this message, your browser or editor doesn't support Web Archive files. Please download a browser that supports Web Archive, such as Windows® Internet Explorer®.
+
+------=_NextPart_01D35D2D.277E81B0
+Content-Location: file:///C:/6947E2A5/APT32Lure.htm
+Content-Transfer-Encoding: quoted-printable
+Content-Type: text/html; charset="windows-1252"
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
![]()
+
+
-
-
![]()
-
-