2022-08-10 (WEDNESDAY) - THREE COBALT STRIKES FROM ONE ICEDID (BOKBOT) INFECTION

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1557450489473662976

NOTES:

• Zip files are password-protected.  If you don't know the password, see the "about" page of this website.

ASSOCIATED FILES:

• 2022-08-10-IOCs-for-IcedID-and-Cobalt-Strike.txt.zip   2.1 kB   (2,074 bytes)
• 2022-08-09-IcedID-part-1-initial-infection.pcap.zip   2.5 MB   (2,477,252 bytes)
• 2022-08-09-IcedID-part-2-with-Cobalt-Strike.pcap.zip   19.3 MB   (19,306,043 bytes)
• 2022-08-10-IcedID-with-Cobalt-Strike-malware-and-artifacts.zip   3.1 MB   (3,143,555 bytes)

 

Click here to return to the main page.