Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
23 IOCs
Tracking Bokbot (icedid) Infrastructure
Malware Families
Excerpt
https://team-cymru.com/blog/2021/05/19/tracking-bokbot-infrastructure/ Tracking BokBot (IcedID) Infrastructure By S2 Research Team Published: 2021-05-19 · Archived: 2026-10-25 02:18:05 UTC Mapping a Vast and Currently Active IcedID Network BokBot (also known as IcedID) started life as a banking trojan using man-in-the-browser attacks to steal credentials from online banking sessions and initiate fraudulent transactions. Over time, the operator(s) of BokBot have also developed…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →23 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 185.18.54.134 | High | Score 67/100 | First seen |
| IP | 95.215.0.211 | High | Score 67/100 | First seen |
| Domain | golddisco.top | High | Score 68/100 | First seen |
| IP | 95.217.51.27 | High | Score 67/100 | First seen |
| IP | 185.103.110.172 | High | Score 67/100 | First seen |
| IP | 185.186.141.140 | High | Score 67/100 | First seen |
| IP | 31.184.193.142 | High | Score 67/100 | First seen |
| IP | 31.184.193.17 | High | Score 67/100 | First seen |
| URL | https://team-cymru.com/blog/2021/05/19/tracking-bokbot-infrastructure/ | High | Score 67/100 | First seen |
| Domain | june85.cyou | High | Score 68/100 | First seen |
| Domain | main.info | High | Score 67/100 | First seen |
| IP | 80.66.83.166 | High | Score 67/100 | First seen |
| Domain | colosssueded.top | High | Score 68/100 | First seen |
| IP | 45.128.151.15 | High | Score 67/100 | First seen |
| IP | 146.185.215.18 | High | Score 67/100 | First seen |
| Domain | colombosuede.club | High | Score 68/100 | First seen |
| IP | 5.101.0.243 | High | Score 67/100 | First seen |
| IP | 5.101.0.245 | High | Score 67/100 | First seen |
| IP | 45.143.138.72 | High | Score 67/100 | First seen |
| IP | 46.30.42.185 | High | Score 67/100 | First seen |
| IP | 31.184.192.39 | High | Score 67/100 | First seen |
| IP | 195.19.192.49 | High | Score 67/100 | First seen |
| IP | 176.9.19.209 | High | Score 67/100 | First seen |
IOC Relationship Graph
Building graph…