Threat Analysis | Accenture

This iDefense/Accenture threat analysis documents a DRAGONFISH (Lotus Blossom) cyber-espionage campaign deploying a new Elise malware variant via malicious Word docs exploiting CVE-2017-11882 to target ASEAN defense officials and affiliates; it includes detailed malware behavior, MD5s (f12fc7..., cd36bb...), a hardcoded C2 (103.236.150.14), persistence and mutex indicators, and mitigation/hunting guidance.