IcedID: new malware version

This report analyzes a new IcedID (BokBot) banking Trojan variant that uses steganography to hide its second-stage downloader, main module, and configuration in PNG images; it details the multi-stage infection flow, persistence, MiTM proxy/hooker for HTTPS interception, VNC and SOCKS backconnect capabilities, UAC bypass methods, SSL pinning, VM checks, and provides indicators of compromise and C2 URLs to support detection and response.