CARBANAK Week Part Two: Continuing the CARBANAK Source Code Analysis

This FireEye threat-research blog analyzes a CARBANAK source code dump, detailing antivirus detection/evasion routines, multiple privilege-escalation exploits (including public CVEs and UAC bypasses), embedded credentials and cryptographic keys, and network-based indicators (domains, IPs, and certificates) that corroborate CARBANAK/FIN7 activity and can be used for detection and disclosure.