2023-08-29 (TUESDAY) - ICEDID (BOKBOT) INFECTION WITH KEYHOLE VNC AND COBALT STRIKE

REFERENCES:

• https://twitter.com/Unit42_Intel/status/1707898425973280907

NOTES:

• Zip files are password-protected.  If you don't know the password, see the "about" page of this website.

 

ASSOCIATED FILES:

• 2023-09-28-IOCs-for-IcedID-with-KeyholeVNC-and-Cobalt-Strike.txt.zip   2.2 kB   (2,172 bytes)
• 2023-09-28-IcedID-infection-with-Keyhole-VNC-and-Cobalt-Strike.pcap.zip   11.5 MB   (11,531,911 bytes)
• 2023-09-28-IcedID-malware-and-artifacts.zip   1.4 MB   (1,373,200 bytes)

 

Click here to return to the main page.