MITRE ATT&CKsoftware (malware)

S0484 Carberp

Published 2020-07-15 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2020-07-15

Description

Carberp is a credential and information stealing malware that has been active since at least 2009. Carberp's source code was leaked online in 2013, and subsequently used as the foundation for the Carbanak backdoor.

Related

Uses · MITRE ATT&CK (25)

  • T1685 Disable or Modify Tools technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1564.001 Hidden Files and Directories sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1021.005 VNC sub-technique
  • T1056.004 Credential API Hooking sub-technique
  • T1555 Credentials from Password Stores technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1055.004 Asynchronous Procedure Call sub-technique
  • T1542.003 Bootkit sub-technique
  • T1497 Virtualization/Sandbox Evasion technique
  • T1185 Browser Session Hijacking technique
  • T1012 Query Registry technique
  • T1014 Rootkit technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1057 Process Discovery technique
  • T1068 Exploitation for Privilege Escalation technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1113 Screen Capture technique

References