Carbon

Malware & Tools · Carbon

· MalwareS0335 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Carbon is a sophisticated, second-stage backdoor and framework that can be used to steal sensitive information from victims. Carbon has been selectively used by Turla to target government and foreign affairs-related organizations in Central Asia.(Citation: ESET Carbon Mar 2017)(Citation: Securelist Turla Oct 2018)

Tactic Coverage

discovery (7)command and control (4)stealth (3)privilege escalation (3)persistence (2)exfiltration (1)execution (1)collection (1)

Used By (1 groups)

G0010TurlaIRON HUNTER, Group 88

Techniques (18)

T1012Query Registry

discovery

T1016System Network Configuration Discovery

discovery

T1018Remote System Discovery

discovery

T1027Obfuscated Files or Information

stealth

T1048.003Exfiltration Over Unencrypted Non-C2 Protocol

exfiltration

T1049System Network Connections Discovery

discovery

T1053.005

References

https://attack.mitre.org/software/S0335 https://www.welivesecurity.com/2017/03/30/carbon-paper-peering-turlas-second-stage-backdoor/https://securelist.com/shedding-skin-turlas-fresh-faces/88069/