Description

The File Manager feature in malware serves as a Swiss Army knife for cybercriminals, enabling them to list, download, upload, or delete files on a compromised system. Acting as an illicit file explorer, this feature provides comprehensive access to the victim's stored data, whether it's sensitive personal information, valuable intellectual property, or configuration files that can be manipulated for further compromise. The ability to upload files also means the attacker can place additional malicious payloads or tools on the system, facilitating a deeper level of exploitation. Likewise, the download function allows for easy exfiltration of valuable or sensitive data. Deleting files can either be used to cover tracks or cause harm, making the File Manager feature a versatile tool in the arsenal of a cybercriminal.

Existing Techniques

Name	Associated Feature(s)	Has Snippet	Matching Sample
Execute Programs	File Manager, Shell Access		0
File Search	File Manager		0
File System Enumeration	File Manager		0
Network Shares Enumeration	File Manager, Network Manager		0

Associated with Releases

Version	Origins	Authors	Languages	Release Date
Net-Devil 1.5	Unknown 🏴‍☠️	Nilez	Delphi	Jul, 2002
Ulysses 1.4	Romania 🇷🇴	Tataye	Delphi	Aug, 2002
LanFiltrator Beta 7	Australia 🇦🇺	Read101	Delphi	Aug, 2002
Ulysses 1.72	Romania 🇷🇴	Tataye	Delphi	Sep, 2002
Ulysses 1.73	Romania 🇷🇴	Tataye	Delphi	Sep, 2002
Ghost 2.4	Israel 🇮🇱	Lame_Joker	Visual Basic 6 (VB6)	Sep, 2002
Beast 1.7	Romania 🇷🇴	Tataye	Delphi	Oct, 2002
LanFiltrator 1.0	Australia 🇦🇺	Read101	Delphi	Oct, 2002
Beast 1.8	Romania 🇷🇴	Tataye	Delphi	Nov, 2002
Silent Spy 2.10	United Kingdom 🇬🇧	HaTcHeT	Delphi	Nov, 2002
MoSucker 3.0b	Germany 🇩🇪	Superchachi	Visual Basic 6 (VB6)	Nov, 2002
Beast 1.90	Romania 🇷🇴	Tataye	Delphi	Dec, 2002
Turkojan 1.0	Turkey 🇹🇷	Fungus	Delphi	Jan, 2003
Beast 1.91	Romania 🇷🇴	Tataye	Delphi	Jan, 2003
Beast 1.92	Romania 🇷🇴	Tataye	Delphi	Feb, 2003
SubSeven 2.1.5 Legends	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Feb, 2003
CIA 1.0	England 🏴󠁧󠁢󠁥󠁮󠁧󠁿	Alchemist	Visual Basic 6 (VB6)	Mar, 2003
Z-dem0n 1.26	Unknown 🏴‍☠️	ZnAsH	Delphi	Mar, 2003
CIA 1.1	England 🏴󠁧󠁢󠁥󠁮󠁧󠁿	Alchemist	Visual Basic 6 (VB6)	Apr, 2003
Beast 2.00	Romania 🇷🇴	Tataye	Delphi	May, 2003
Beast 2.01	Romania 🇷🇴	Tataye	Delphi	Jun, 2003
LanFiltrator 1.1 Fix 1	Australia 🇦🇺	Read101	Delphi	Aug, 2003
A-311 Death 1.03	Russia 🇷🇺	Corpse	Assembly, MASM	Aug, 2003
Optix Pro 1.32	Unknown 🏴‍☠️	s13az3 , xMs	Delphi	Sep, 2003
CIA 1.2	England 🏴󠁧󠁢󠁥󠁮󠁧󠁿	Alchemist	Visual Basic 6 (VB6)	Sep, 2003
Beast 2.05	Romania 🇷🇴	Tataye	Delphi	Sep, 2003
Beast 2.02	Romania 🇷🇴	Tataye	Delphi	Sep, 2003
Sinique 1.0	Unknown 🏴‍☠️	xtremeNTL	Delphi	Oct, 2003
Fearless Lite 1.01	Australia 🇦🇺, France 🇫🇷	Read101 , Triforce	Delphi	Nov, 2003
ProRat 1.1	Turkey 🇹🇷	HighLander , ATmaCA	Borland C++	Jan, 2004
Hue 1.0	Unknown 🏴‍☠️	B33T	Visual Basic 6 (VB6)	Jan, 2004
ProRat 1.2	Turkey 🇹🇷	HighLander , ATmaCA	Borland C++	Jan, 2004
ProRat 1.3	Turkey 🇹🇷	HighLander , ATmaCA	Borland C++	Feb, 2004
Nuclear RAT 1.0 Beta 5	Brazil 🇧🇷	caesar2k	Delphi	Feb, 2004
Beast 2.06	Romania 🇷🇴	Tataye	Delphi	Feb, 2004
ProRat 1.4	Turkey 🇹🇷	HighLander , ATmaCA	Borland C++	Feb, 2004
LanFiltrator 1.5 Beta III	Australia 🇦🇺	Read101	Delphi	Feb, 2004
ProRat 1.6	Turkey 🇹🇷	HighLander , ATmaCA	Borland C++	Mar, 2004
ProRat 1.8	Turkey 🇹🇷	HighLander , ATmaCA	Borland C++	Mar, 2004
acid Drop 1.5	Unknown 🏴‍☠️	acid_alchemy	Visual Basic 6 (VB6)	Apr, 2004
Infector NG 2004 2.1.0	Belgium 🇧🇪, United Kingdom 🇬🇧	fc , Infiltration	Delphi	May, 2004
Amiboide 1.0	France 🇫🇷	Mistareal	Visual Basic 6 (VB6)	Jun, 2004
Amiboide 2.0	France 🇫🇷	Mistareal	Visual Basic 6 (VB6)	Jun, 2004
Messiah 1.0	Unknown 🏴‍☠️	Splinter	Visual Basic 6 (VB6)	Jul, 2004
Optix Pro 1.33	Unknown 🏴‍☠️	s13az3	Delphi	Aug, 2004
Flux 1.0	Sweden 🇸🇪	Gargamel	C++	Aug, 2004
Beast 2.07	Romania 🇷🇴	Tataye	Delphi	Aug, 2004
Erazer 1.0	Austria 🇦🇹	(v)aster	Delphi	Aug, 2004
Messiah 2.0	Unknown 🏴‍☠️	Splinter	Visual Basic 6 (VB6)	Aug, 2004
Erazer 1.1	Austria 🇦🇹	(v)aster	Delphi	Sep, 2004