General

  • Target
    Carbon.rar
  • Size 10.4MB
  • Sample260822-lrm39axvgw
  • SHA256 fb98662a602fba99ee0a93bbd1cd987b22baf0f2d9811a941ec0558ecc0bc6f7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Loader/Checker/CarbonChecker.exe
    • Size 1.7MB
    • SHA256 a0580084b05e47892997c88cf992a4a326c5eede2e87af5717d99731ee450645
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information as a root user.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Target
      Loader/Debug/Debug.exe
    • Size 1.1MB
    • SHA256 81b863aab2979e4e86e3157e2102a2bd14d5f98062fd6098bd50f303c89584ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      Loader/Loader/Loader.exe
    • Size 9.5MB
    • SHA256 be8b16fb43c09d61ba7d3d44cdecbb776972b03bf3651fdf82b8efa0b30effdc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks