%PDF-1.7
%
1 0 obj
<>>>
endobj
2 0 obj
<>stream
application/pdf
Trend Micro Research
Trend Micro Research
Earth Baku: An APT Group Targeting Indo-Pacific Countries With New Stealth Loaders and Backdoor
©2021 by Trend Micro, Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, Trend Micro Smart Protection Network, Trend Micro XDR, and Trend Micro Managed XDR are trademarks or registered trademarks of Trend Micro, Incorporated. All other product or company names may be trademarks or registered trademarks of their owners.
targeted attack
StealthMutant
cybersecurity
APT41
Earth Baku
StealthVector
2021-08-19T10:55:26+08:00
2021-08-19T10:55:38+08:00
2021-08-19T10:55:38+08:00
Adobe InDesign 16.3 (Windows)
uuid:489a358d-4b07-4647-842d-500fbeab22b3
xmp.did:6C68BBCB351AE511987CEC1E2399EE89
xmp.id:07cbdbbe-7da0-5e46-b425-b3d80154130c
proof:pdf
xmp.iid:4a3d5414-2ea1-0d43-af3c-1f459917b37a
xmp.did:e22aa8a9-8ac6-46a2-8b40-a8e5524f6f05
xmp.did:6C68BBCB351AE511987CEC1E2399EE89
default
converted
from application/x-indesign to application/pdf
Adobe InDesign 16.3 (Windows)
/
2021-08-19T10:55:27+08:00
True
Adobe PDF Library 15.0
False
endstream
endobj
14 0 obj
<>
endobj
15 0 obj
<>
endobj
3 0 obj
<>
endobj
17 0 obj
<>
endobj
18 0 obj
<>
endobj
24 0 obj
<>
endobj
25 0 obj
<>
endobj
26 0 obj
<>
endobj
27 0 obj
<>
endobj
28 0 obj
<>
endobj
49 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44390>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
50 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44391>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
51 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44392>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
52 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44393>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
53 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44394>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
54 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44745>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
55 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44763>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
56 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 21837>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
57 0 obj
</LastModified/NumberOfPageItemsInPage 1/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 0.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 44887>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
58 0 obj
</LastModified/NumberOfPageItemsInPage 3/NumberofPages 1/OriginalDocumentID/PageItemUIDToLocationDataMap<0[513.0 2.0 3.0 -232.638 373.0 232.638 384.055 1.0 0.0 0.0 1.0 -206.638 392.131]/1[611.0 0.0 3.0 -238.0 366.22 238.0 400.703 1.0 0.0 0.0 1.0 -1.5 450.638]/2[634.0 1.0 3.0 -237.638 145.538 237.638 250.913 1.0 0.0 0.0 1.0 -1.5 276.529]>>/PageTransformationMatrixList<0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<0 19464>>/PageWidthList<0 595.276>>>>>>/Resources<>/ExtGState<>/Font<>/ProcSet[/PDF/Text]/XObject<>>>/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
90 0 obj
[95 0 R]
endobj
91 0 obj
<>stream
HTOo0Sc#^5mm.uԱ3ić9IKEϾ+ЛExi {,Pn$8Yr<#)$M4ɲ%a %;/%1abʘR
f4'8
/te_t[)|Փ8LaUG1ZK 6>]kxk]%0<<33&3HVOo~9pt($}0tA.ҠX8V
OhzCiQnvua,ݘ.HatOʸHa2(*PGG\2k@H
Fx1#X~Poa;p0VUFXx6Sɭ80/&ˎ ,ҐP(l5H9qe#oe)hs؞ylm:7{aNI
\8"z'u㺶56/ Lt0IPsz""69oAׁL9;{r #ی2Jh/7GhR߁ټB
* ֹyþSZX
mi+qwE^^)mVxfF4D:[- -1!>
_\腯¶'LvLȣx7aٛ]D/Lr\dp8Yk.N
ᦹ8w? {
endstream
endobj
92 0 obj
<>
endobj
93 0 obj
<>/ExtGState<>/Font<>/ProcSet[/PDF/Text/ImageC]/Properties<>/Shading<>/XObject<>>>/Subtype/Form>>stream
Hn)Rfa];&I.h>}ꡨY٠ qf:U={^,Wo^f_]U]rPW֨drQnKڨnwŹ2]
f\VuN>璪ZnݭQ[z۽=g_^YSXc_g?mzm/-q%w?$~,⪲16NXT)B":|2¼Һ%hgIgށn Ie
ٓW(H#9NQ^LZ\3Fuw;(ico球.X0lB2aP +4Mp~ɫ0Ψө(KmQ8ZFLbOLªluSkc:ր1L=ȃQSaI>M9ko9C(O;Ubϡ;_Zw
ƞ4uCSv8jבN)A4hɕs
Լ"r܊~hh\ (*l 8$b "0V`η4
թ` d`6$3D0,vg@-TVX9j!v:1cA6wX#L2ƦJq57cPx:VG* RFκ挌y)5:
ve QY_A(m. B ("a16F0 k2jӷDF hL{ @$MtnY!h҄^"X#2GqhЦ=ID
&,Kj(kBrFEsL5 x߲FImQG2R`A~\aZh18Җru@Hđ1H}Ajc@jw s8"ƉK
cP?Ap6Os4Sf/.?SJl>7ʪǎRNLr'Oҭ:Vn}gՇj~I_.DvVE]lnqX]kZnn{گv7G9ܮ(:\}XԻbwPoa