MITRE ATT&CKsoftware (malware)

S0335 Carbon

Published 2019-01-29 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2019-01-29

Description

Carbon is a sophisticated, second-stage backdoor and framework that can be used to steal sensitive information from victims. Carbon has been selectively used by Turla to target government and foreign affairs-related organizations in Central Asia.

Related

Uses · MITRE ATT&CK (18)

  • T1573.002 Asymmetric Cryptography sub-technique
  • T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1543.003 Windows Service sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1018 Remote System Discovery technique
  • T1027 Obfuscated Files or Information technique
  • T1049 System Network Connections Discovery technique
  • T1057 Process Discovery technique
  • T1069 Permission Groups Discovery technique
  • T1095 Non-Application Layer Protocol technique
  • T1102 Web Service technique
  • T1124 System Time Discovery technique

Referenced by MITRE ATT&CK · uses (1)

References