● Malware

Carbon

Carbon is a sophisticated, second-stage backdoor and framework that can be used to steal sensitive information from victims. Carbon has been selectively used by Turla to target government and foreign affairs-related organizations in Central Asia.

View graph Watch Export

Indicators tracked

Intelligence Reports20

20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

19 relationships

T1053.005: Scheduled Task

source

T1069: Permission Groups Discovery

source

T1074.001: Local Data Staging

source

T1543.003: Windows Service

source

T1140: Deobfuscate/Decode Files or Information

source

T1016: System Network Configuration Discovery

source

T1049: System Network Connections Discovery

source

T1102: Web Service

source

T1057: Process Discovery

source

T1027: Obfuscated Files or Information

source

T1573.002: Asymmetric Cryptography

source

T1095: Non-Application Layer Protocol

source

T1012: Query Registry

source

T1071.001: Web Protocols

source

T1018: Remote System Discovery

source

T1124: System Time Discovery

source

T1055.001: Dynamic-link Library Injection

source

T1048.003: Exfiltration Over Unencrypted Non-C2 Protocol

source