2022-01-27 (THURSDAY) - CONTACT FORMS CAMPAIGN ICEDID (BOKBOT) WITH COBALT STRIKE

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1488179539909951491

ASSOCIATED FILES:

• 2022-01-27-IOCs-for-Contact-Forms-IcedID-with-Cobalt-Strike.txt.zip   2.1 kB   (2,056 bytes)
• 2022-01-27-Contact-Forms-IcedID-with-Cobalt-Strike-part-1.pcap.zip   3.4 MB   (3,381,959 bytes)
• 2022-01-27-Contact-Forms-IcedID-with-Cobalt-Strike-part-2.pcap.zip   4.6 MB   (4,614,251 bytes)
• 2022-01-27-IcedID-and-Cobalt-Strike-malware-and-artifacts.zip   1.7 MB   (1,716,685 bytes)

 

Click here to return to the main page.