CARBANAK Week Part One: A Rare Occurrence

**Executive summary:** This FireEye/FLARE analysis examines CARBANAK source code and operator tool dumps, translating Russian-language comments and GUIs, documenting builder and C2 functionality (video capture, RDP/VNC, SOCKS5, plugins), describing named-pipe tasking and API-hash import obfuscation, and linking artefacts to FIN7 and large-scale financial theft operations.