Carbanak

Techniques (MITRE ATT&CK)9

SourceMITRE ATT&CK

Attribution confidence: 50%

Also known as:ATK32AnunakCARBON SPIDERCalciumCarbon SpiderCoreidELBRUSG0008G0046GOLD NIAGARAJokerStashSangria TempestWILD COMET

Vexday analysis

Carbanak é um grupo cibercriminoso que utiliza o malware de mesmo nome para atacar instituições financeiras desde pelo menos 2013. O grupo, também rastreado sob o alias Anunak (identificador MITRE ATT&CK G0008), pode ter vínculos com outros grupos que igualmente empregam o malware Carbanak, como Cobalt Group e FIN7. Ao todo, são documentadas 9 técnicas MITRE ATT&CK associadas a suas atividades.

Techniques (MITRE ATT&CK) 9

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Resource development

Tool

Persistence

Windows Service

Command and control

Bidirectional Communication Remote Access Tools

defense-impairment

Disable or Modify System Firewall

stealth

Masquerade Task or Service Match Legitimate Resource Name or Location Valid Accounts Rundll32

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Known infrastructure 3

Real indicators (C2, domains, URLs and hashes) associated with the malware this group uses. Source: abuse.ch (ThreatFox, URLhaus, MalwareBazaar).

sha1_hashc5ec7e2ad924e832e49fbac9d0c82719b570e080MimiKatzthreatfox

md5_hash77c96f339974b65ae435313a8fcc3b35MimiKatzthreatfox

sha256_hash889cc3e793cb39889c7acc8e73a84973e9a08fcd69451f7b546509c74ffdda90MimiKatzthreatfox

References

Carbanak uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →