2021-10-07 (THURSDAY) - OBAMA111 QAKBOT (QBOT) WITH COBALT STRIKE, EMAIL TRAFFIC, AND ANGRYPUPPY/BLOODHOUND ACTIVITY
NOTICE:
- The zip archives on this page have been updated, and they now use the new password scheme. For the new password, see the "about" page of this website.
REFERENCE:
NOTES:
- For more information about ANGRYPUPPY/BloodHound, see https://www.networksgroup.com/blog/angrypuppy-bloodhound-attack-path-execution-for-cobalt-strike-2
ASSOCIATED FILES:
- 2021-10-07-IOCs-from-obama111-Qakbot-infection.txt.zip 2.8 kB (2,805 bytes)
- 2021-10-07-obama111-Qakbot-with-Cobalt-Strike-and-email-and-ANGRYPUPPY-bloodhound-activity.pcap.zip 51.4 MB (51,448,143 bytes)
- 2021-10-07-Qakbot-and-Cobalt-Strike-and-ANGRYPUPPY-Bloodhound-malware-and-artifacts.zip 2.8 MB (2,795,736 bytes)
Click here to return to the main page.