2022-10-04 - HTML SMUGGLING --> ICEDID (BOKBOT) --> COBALT STRIKE

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1577773890012594177

 

ASSOCIATED FILES:

• 2022-10-04-IOCs-for-IcedID-infection-with-Cobalt-Strike.txt.zip   7.4 kB   (7,436 bytes)
• 2022-10-04-HTML-attachments-16-examples.zip   20.3 MB   (20,310,059 bytes)
• 2022-10-04-password-protected-zip-archives-16-examples.zip   18.8 MB   (18,801,635 bytes)
• 2022-10-04-extracted-ISO-images-16-examples.zip   18.8 MB   (18,801,450 bytes)
• 2022-10-04-contents-of-ISO-images-16-examples.zip   18.8 MB   (18,779,956 bytes)
• 2022-10-04-IcedID-infection-with-Cobalt-Strike.pcap.zip   8.4 MB   (8,398,135 bytes)
• 2022-10-04-malware-from-an-infected-Windows-host.zip   1.9 MB   (1,864,153 bytes)

 

Click here to return to the main page.