S0462Windows

S0462CARROTBAT

Platforms
1
ATT&CK
14.1
References
3

Description

[CARROTBAT](https://attack.mitre.org/software/S0462) is a customized dropper that has been in use since at least 2017. [CARROTBAT](https://attack.mitre.org/software/S0462) has been used to install [SYSCON](https://attack.mitre.org/software/S0464) and has infrastructure overlap with [KONNI](https://attack.mitre.org/software/S0356).(Citation: Unit 42 CARROTBAT November 2018)(Citation: Unit 42 CARROTBAT January 2020)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0462
  2. https://unit42.paloaltonetworks.com/unit42-the-fractured-block-campaign-carrotbat-malware-used-to-deliver-malware-targeting-southeast-asia/
  3. https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
CARROTBALL
Software
SYSCON
Software
SDBbot
Software
Carberp
Software
Carp Downloader
Software
CozyCar
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.