2022-08-03 (WEDNESDAY) - ICEDID (BOKBOT) INFECTION WITH COBALT STRIKE

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1555255274897801216

ASSOCIATED FILES:

• 2022-08-03-IOCs-for-IcedID-and-Cobalt-Strike.txt.zip   1.9 kB   (1,877 bytes)
• 2022-08-03-IcedID-malspam-1707-UTC.eml.zip   126 kB   (126,334 bytes)
• 2022-08-03-IcedID-with-Cobalt-Strike-carved.pcap.zip   6.7 MB   (6,665,184 bytes)
• 2022-08-03-IcedID-and-Cobalt-Strike-malware-and-artifacts.zip   3.2 MB   (3,223,305 bytes)

 

Click here to return to the main page.