Description

The File Manager feature in malware serves as a Swiss Army knife for cybercriminals, enabling them to list, download, upload, or delete files on a compromised system. Acting as an illicit file explorer, this feature provides comprehensive access to the victim's stored data, whether it's sensitive personal information, valuable intellectual property, or configuration files that can be manipulated for further compromise. The ability to upload files also means the attacker can place additional malicious payloads or tools on the system, facilitating a deeper level of exploitation. Likewise, the download function allows for easy exfiltration of valuable or sensitive data. Deleting files can either be used to cover tracks or cause harm, making the File Manager feature a versatile tool in the arsenal of a cybercriminal.

Categories Disruption, Exfiltration, File System, Alteration
Dangerousness High

Existing Techniques

Name Associated Feature(s) Has Snippet Matching Sample
Execute Programs logoExecute Programs File Manager, Shell Access 0
File Search logoFile Search File Manager 0
File System Enumeration logoFile System Enumeration File Manager 0
Network Shares Enumeration logoNetwork Shares Enumeration File Manager, Network Manager 0

Associated with Releases

Version Origins Authors Languages Release Date
Beast 2.01 logoBeast 2.01 Romania 🇷🇴 Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia 🇦🇺 Read101 Delphi Aug, 2003
A-311 Death 1.03 logoA-311 Death 1.03 Russia 🇷🇺 Corpse Assembly, MASM Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown 🏴‍☠️ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.05 logoBeast 2.05 Romania 🇷🇴 Tataye Delphi Sep, 2003
Beast 2.02 logoBeast 2.02 Romania 🇷🇴 Tataye Delphi Sep, 2003
Sinique 1.0 logoSinique 1.0 Unknown 🏴‍☠️ xtremeNTL Delphi Oct, 2003
Fearless Lite 1.01 logoFearless Lite 1.01 Australia 🇦🇺, France 🇫🇷 Read101 , Triforce Delphi Nov, 2003
ProRat 1.1 logoProRat 1.1 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
Hue 1.0 logoHue 1.0 Unknown 🏴‍☠️ B33T Visual Basic 6 (VB6) Jan, 2004
ProRat 1.2 logoProRat 1.2 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
ProRat 1.3 logoProRat 1.3 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
Nuclear RAT 1.0 Beta 5 logoNuclear RAT 1.0 Beta 5 Brazil 🇧🇷 caesar2k Delphi Feb, 2004
Beast 2.06 logoBeast 2.06 Romania 🇷🇴 Tataye Delphi Feb, 2004
ProRat 1.4 logoProRat 1.4 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
LanFiltrator 1.5 Beta III logoLanFiltrator 1.5 Beta III Australia 🇦🇺 Read101 Delphi Feb, 2004
ProRat 1.6 logoProRat 1.6 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2004
ProRat 1.8 logoProRat 1.8 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2004
acid Drop 1.5 logoacid Drop 1.5 Unknown 🏴‍☠️ acid_alchemy Visual Basic 6 (VB6) Apr, 2004
Infector NG 2004 2.1.0 logoInfector NG 2004 2.1.0 Belgium 🇧🇪, United Kingdom 🇬🇧 fc , Infiltration Delphi May, 2004
Amiboide 1.0 logoAmiboide 1.0 France 🇫🇷 Mistareal Visual Basic 6 (VB6) Jun, 2004
Amiboide 2.0 logoAmiboide 2.0 France 🇫🇷 Mistareal Visual Basic 6 (VB6) Jun, 2004
Optix Pro 1.33 logoOptix Pro 1.33 Unknown 🏴‍☠️ s13az3 Delphi Aug, 2004
Beast 2.07 logoBeast 2.07 Romania 🇷🇴 Tataye Delphi Aug, 2004
Flux 1.0 logoFlux 1.0 Unknown 🏴‍☠️ Gargamel C++ Aug, 2004
Institution 2004 0.4.0 logoInstitution 2004 0.4.0 United States 🇺🇸 Aphex Delphi Oct, 2004
CIA 1.3 logoCIA 1.3 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Dec, 2004
Messiah 4.0 logoMessiah 4.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Jan, 2005
Seed 1.1 logoSeed 1.1 Brazil 🇧🇷 caesar2k Delphi, C++ Feb, 2005
ProRat 1.9 logoProRat 1.9 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2005
Y3K rat 2k5 RC 1.0 logoY3K rat 2k5 RC 1.0 Austria 🇦🇹 SHA Delphi Jun, 2005
Y3K rat 2k5 RC 1.1 logoY3K rat 2k5 RC 1.1 Austria 🇦🇹 SHA Delphi Nov, 2005
TrojNa$ 1.0 logoTrojNa$ 1.0 Unknown 🏴‍☠️, Australia 🇦🇺 flippmode , Satan_Addict , Read101 Delphi Jan, 2006
Bersek 1.1 logoBersek 1.1 Brazil 🇧🇷 XpyXt Visual Basic 6 (VB6) Jun, 2006
Turkojan 3.0 logoTurkojan 3.0 Turkey 🇹🇷 Fungus Delphi Sep, 2006
Bifrost 1.2.1 logoBifrost 1.2.1 Sweden 🇸🇪 ksv C++ Jan, 2007
Bandook 1.35 logoBandook 1.35 Lebanon 🇱🇧 PrinceAli Delphi, C++ Apr, 2007
BlasterX 1.5 Flash The World logoBlasterX 1.5 Flash The World France 🇫🇷 BlasterZ , Blastwar Visual Basic 6 (VB6) Apr, 2007
BlasterX 1.5 logoBlasterX 1.5 France 🇫🇷 BlasterZ , Blastwar Visual Basic 6 (VB6) Apr, 2007
Poison Ivy 2.3.0 logoPoison Ivy 2.3.0 Sweden 🇸🇪 Shapeless Delphi, MASM Jun, 2007
Hav-Rat 1.3.2 logoHav-Rat 1.3.2 Sweden 🇸🇪 Havalito Delphi Jul, 2007
sharK 2.4.0 Fwb+ logosharK 2.4.0 Fwb+ Germany 🇩🇪 sNiper109 , rockZ Visual Basic 6 (VB6) Aug, 2007
DARKMOON 4.11 Private Edition logoDARKMOON 4.11 Private Edition Spain 🇪🇸 shukisnike Delphi Aug, 2007
Nuclear RAT 2.1.0 logoNuclear RAT 2.1.0 Brazil 🇧🇷 caesar2k Delphi Sep, 2007
Bump-Rat 1.2 Beta logoBump-Rat 1.2 Beta France 🇫🇷 Scraniak Visual Basic 6 (VB6) Sep, 2007
Poison Ivy 2.3.2 logoPoison Ivy 2.3.2 Sweden 🇸🇪 Shapeless Delphi, MASM Jan, 2008
Lost Door 1.0 logoLost Door 1.0 Tunisia 🇹🇳 OussamiO Visual Basic 6 (VB6) Jan, 2008
ZombieRat 1.2 logoZombieRat 1.2 Romania 🇷🇴 The Bo$$ Assembly, Delphi Jan, 2008
Lost Door 2.0 logoLost Door 2.0 Tunisia 🇹🇳 OussamiO Visual Basic 6 (VB6) Feb, 2008