aol.pm

Carberp

Software · ATTACK:enterprise:S0484

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0484",
  "title": "Carberp",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0484",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--bbcd7a02-ef24-4171-ac94-a93540173b94",
  "external_id": "S0484",
  "domain": "enterprise",
  "created": "2020-07-15T19:48:35.063Z",
  "modified": "2024-04-11T02:47:56.829Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "KasperskyCarbanak",
      "url": "https://securelist.com/the-great-bank-robbery-the-carbanak-apt/68732/"
    },
    {
      "source_name": "RSA Carbanak November 2017",
      "url": "https://www.rsa.com/content/dam/en/white-paper/the-carbanak-fin7-syndicate.pdf"
    },
    {
      "source_name": "Trend Micro Carberp February 2014",
      "url": "https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/carberp"
    }
  ]
}

Explicit source assertions (25)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1542.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--02c3d977-d797-4105-9535-11682d4896e9

ESET Carberp March 2012

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1555

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0d8d668e-ce2f-4ef8-8dd4-8c9cd17f2b23

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--201502c6-d208-408b-b6f3-50e39dab14ca

Prevx Carberp March 2011 · Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1014

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--21b929b8-8fec-47a5-8f98-554a043f9de5

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1056.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22de39b7-5d1c-4d44-b63c-36cf14a9c90d

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--23bc50df-16da-4b2d-89b3-1a74c7602aa2

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1497

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2c112e41-be75-4f99-84ac-ce7776f88fca

ESET Carberp March 2012

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--30c0f7aa-473d-42c3-81ff-f39c6f21ee52

Prevx Carberp March 2011 · Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--320966af-53db-41e3-aaf0-f5fd68bce8ca

Prevx Carberp March 2011 · Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1021.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34072026-f8dd-4eb0-88d9-c76cddfa8ca2

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1185

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4c7a0e49-6b38-417a-881b-6f9474ea4ec2

Prevx Carberp March 2011 · Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1068

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5fdf6cb3-8046-4c32-aca6-75cda70b7614

Prevx Carberp March 2011 · ESET Carberp March 2012

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1055.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--63a09269-0546-4613-b746-0e1f8dac7d5b

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8121ed43-42eb-42ad-a86f-26fb53b71975

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8de816a1-c89b-47ea-9456-c3bc139e6885

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1564.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9b2a5ea0-3199-44ee-a5a5-959e95d3a2e5

Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b6c1ee96-2e9d-41fc-b186-a9611ec752df

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c3add97f-09bc-4c16-81ff-116106558487

Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c808ac7c-6da1-4be8-9233-0020fbc3e8ac

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--caa542d3-c8b0-4d10-998d-0998be406da8

Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1055.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d5f2b0fc-c865-419d-aacd-8004ecba00df

ESET Carberp March 2012

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dacff5f4-a7ed-424b-847b-377ed2b91679

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e1a70685-4492-4866-a10b-7630be265c86

Prevx Carberp March 2011

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f83167c8-b964-44d2-b370-5f5e86460568

Trusteer Carberp October 2010

ATTACK:enterprise:S0484 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fafa8b19-211d-4878-9d80-2126e1604b68

Prevx Carberp March 2011

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.