2022-08-10 (WEDNESDAY) - THREE COBALT STRIKES FROM ONE ICEDID (BOKBOT) INFECTION
REFERENCE:
NOTES:
- Zip files are password-protected. If you don't know the password, see the "about" page of this website.
ASSOCIATED FILES:
- 2022-08-10-IOCs-for-IcedID-and-Cobalt-Strike.txt.zip 2.1 kB (2,074 bytes)
- 2022-08-09-IcedID-part-1-initial-infection.pcap.zip 2.5 MB (2,477,252 bytes)
- 2022-08-09-IcedID-part-2-with-Cobalt-Strike.pcap.zip 19.3 MB (19,306,043 bytes)
- 2022-08-10-IcedID-with-Cobalt-Strike-malware-and-artifacts.zip 3.1 MB (3,143,555 bytes)
Click here to return to the main page.