2022-08-08 (MONDAY) - ICEDID (BOKBOT) INFECTION WITH COBALT STRIKE

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1557009330762809348

ASSOCIATED FILES:

• 2022-08-08-IOCs-for-IcedID-and-Cobalt-Strike.txt.zip   1.7 kB   (1,687 bytes)
• 2022-08-08-IcedID-with-Cobalt-Strike-carved.pcap.zip   5.8 MB   (5,781,912 bytes)
• 2022-08-08-IcedID-with-Cobalt-Strike-malware-and-artifacts.zip   3.0 MB   (3,041,763 bytes)

 

Click here to return to the main page.