CARROTBAT

ATP Sandbox Adv. HeuristicsNetskope IPS

Stats

First seen: May 2023
Last seen: October 2026

MITRE ATT&CK techniques

6 techniques across 4 tactics.

TA0002 Execution

T1059Command and Scripting Interpreter
- T1059.003Windows Command Shell

TA0005 Stealth

T1027Obfuscated Files or Information
- T1027.010Command Obfuscation
- T1027.013Encrypted/Encoded File
T1070Indicator Removal
- T1070.004File Deletion

TA0007 Discovery

T1082System Information Discovery

TA0011 Command and Control

T1105Ingress Tool Transfer

Alert name variants

Alert Name	Engine
Win32.Trojan.CarrotBat	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
MALWARE-OTHER Doc.Downloader.Carrotbat variant download attempt	IPS-SWG

Related families

Astaroth BackConfig Bazar Bisonal BLINDINGCAN