CARROTBALL

Adversary Tools · CARROTBALL

· ToolS0465 · Dual-use Araç

Type

Tool

Techniques

Used By

0 groups

Platforms

Windows

Description

CARROTBALL is an FTP downloader utility that has been in use since at least 2019. CARROTBALL has been used as a downloader to install SYSCON.(Citation: Unit 42 CARROTBAT January 2020)

Techniques (4)

T1027Obfuscated Files or Information

stealth

T1071.002File Transfer Protocols

command and control

T1105Ingress Tool Transfer

command and control

T1204.002Malicious File

execution

References

https://attack.mitre.org/software/S0465 https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/