2023-05-10 - ICEID (BOKBOT) INFECTION WITH BACKCONNECT, COBALT STRIKE & KEYHOLE VNC

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1657014096200343554

NOTES:

• Zip files are password-protected.  If you don't know the password, see the "about" page of this website.

 

ASSOCIATED FILES:

• 2023-05-10-IOCs-for-IcedID-with-BackConnect-and-Keyhole-VNC-and-Cobalt-Strike.txt.zip   2.4 kB   (2,373 bytes)
• 2023-05-10-IcedID-infection-with-Backconnet-and-Cobalt-Strike-and-Keyhole-VNC.pcap.zip   14.3 MB   (14,302,331 bytes)
• 2023-05-10-IcedID-malware-and-artifacts.zip   857 kB   (856,869 bytes)

 

Click here to return to the main page.