Description

The File Manager feature in malware serves as a Swiss Army knife for cybercriminals, enabling them to list, download, upload, or delete files on a compromised system. Acting as an illicit file explorer, this feature provides comprehensive access to the victim's stored data, whether it's sensitive personal information, valuable intellectual property, or configuration files that can be manipulated for further compromise. The ability to upload files also means the attacker can place additional malicious payloads or tools on the system, facilitating a deeper level of exploitation. Likewise, the download function allows for easy exfiltration of valuable or sensitive data. Deleting files can either be used to cover tracks or cause harm, making the File Manager feature a versatile tool in the arsenal of a cybercriminal.

Categories File System, Disruption, Exfiltration, Alteration
Dangerousness High

Existing Techniques

Name Associated Feature(s) Has Snippet Matching Sample
Execute Programs logoExecute Programs File Manager, Shell Access 0
File Search logoFile Search File Manager 0
File System Enumeration logoFile System Enumeration File Manager 0
Network Shares Enumeration logoNetwork Shares Enumeration File Manager, Network Manager 0

Associated with Releases

Version Origins Authors Languages Release Date
Institution 2004 0.4.0 logoInstitution 2004 0.4.0 United States ๐Ÿ‡บ๐Ÿ‡ธ Aphex Delphi Oct, 2004
Messiah 3.0 logoMessiah 3.0 Unknown ๐Ÿดโ€โ˜ ๏ธ Splinter Visual Basic 6 (VB6) Oct, 2004
CIA 1.3 logoCIA 1.3 England ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ Alchemist Visual Basic 6 (VB6) Dec, 2004
Messiah 4.0 logoMessiah 4.0 Unknown ๐Ÿดโ€โ˜ ๏ธ Splinter Visual Basic 6 (VB6) Jan, 2005
Seed 1.1 logoSeed 1.1 Brazil ๐Ÿ‡ง๐Ÿ‡ท caesar2k Delphi, C++ Feb, 2005
ProRat 1.9 logoProRat 1.9 Turkey ๐Ÿ‡น๐Ÿ‡ท HighLander , ATmaCA Borland C++ Mar, 2005
Erazer Lite 0.2 logoErazer Lite 0.2 Austria ๐Ÿ‡ฆ๐Ÿ‡น (v)aster Delphi May, 2005
Y3K rat 2k5 RC 1.0 logoY3K rat 2k5 RC 1.0 Austria ๐Ÿ‡ฆ๐Ÿ‡น SHA Delphi Jun, 2005
Erazer Lite 0.3 logoErazer Lite 0.3 Austria ๐Ÿ‡ฆ๐Ÿ‡น (v)aster Delphi Jun, 2005
Erazer Lite 0.4 logoErazer Lite 0.4 Austria ๐Ÿ‡ฆ๐Ÿ‡น (v)aster Delphi Aug, 2005
CyberNetic 1.62 (PE) logoCyberNetic 1.62 (PE) Unknown ๐Ÿดโ€โ˜ ๏ธ, Spain ๐Ÿ‡ช๐Ÿ‡ธ Cybernetic crew , mHKm , shukisnike Delphi Aug, 2005
Y3K rat 2k5 RC 1.1 logoY3K rat 2k5 RC 1.1 Austria ๐Ÿ‡ฆ๐Ÿ‡น SHA Delphi Nov, 2005
TrojNa$ 1.0 logoTrojNa$ 1.0 Unknown ๐Ÿดโ€โ˜ ๏ธ, Australia ๐Ÿ‡ฆ๐Ÿ‡บ flippmode , Satan_Addict , Read101 Delphi Jan, 2006
Bersek 1.1 logoBersek 1.1 Brazil ๐Ÿ‡ง๐Ÿ‡ท XpyXt Visual Basic 6 (VB6) Jun, 2006
Turkojan 3.0 logoTurkojan 3.0 Turkey ๐Ÿ‡น๐Ÿ‡ท Fungus Delphi Sep, 2006
Casper Demo logoCasper Demo Unknown ๐Ÿดโ€โ˜ ๏ธ loog Visual Basic 6 (VB6) Oct, 2006
Bifrost 1.2.1 logoBifrost 1.2.1 Sweden ๐Ÿ‡ธ๐Ÿ‡ช ksv C++ Jan, 2007
Bandook 1.35 logoBandook 1.35 Lebanon ๐Ÿ‡ฑ๐Ÿ‡ง PrinceAli Delphi, C++ Apr, 2007
BlasterX 1.5 logoBlasterX 1.5 France ๐Ÿ‡ซ๐Ÿ‡ท BlasterZ , Blastwar Visual Basic 6 (VB6) Apr, 2007
BlasterX 1.5 Flash The World logoBlasterX 1.5 Flash The World France ๐Ÿ‡ซ๐Ÿ‡ท BlasterZ , Blastwar Visual Basic 6 (VB6) Apr, 2007
Poison Ivy 2.3.0 logoPoison Ivy 2.3.0 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Shapeless Delphi, MASM Jun, 2007
Hav-Rat 1.3.2 logoHav-Rat 1.3.2 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Havalito Delphi Jul, 2007
sharK 2.4.0 Fwb+ logosharK 2.4.0 Fwb+ Germany ๐Ÿ‡ฉ๐Ÿ‡ช sNiper109 , rockZ Visual Basic 6 (VB6) Aug, 2007
DARKMOON 4.11 Private Edition logoDARKMOON 4.11 Private Edition Spain ๐Ÿ‡ช๐Ÿ‡ธ shukisnike Delphi Aug, 2007
Nuclear RAT 2.1.0 logoNuclear RAT 2.1.0 Brazil ๐Ÿ‡ง๐Ÿ‡ท caesar2k Delphi Sep, 2007
Bump-Rat 1.2 Beta logoBump-Rat 1.2 Beta France ๐Ÿ‡ซ๐Ÿ‡ท Scraniak Visual Basic 6 (VB6) Sep, 2007
Poison Ivy 2.3.2 logoPoison Ivy 2.3.2 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Shapeless Delphi, MASM Jan, 2008
Lost Door 1.0 logoLost Door 1.0 Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Jan, 2008
ZombieRat 1.2 logoZombieRat 1.2 Romania ๐Ÿ‡ท๐Ÿ‡ด The Bo$$ Assembly, Delphi Jan, 2008
Lost Door 2.0 logoLost Door 2.0 Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Feb, 2008
Turkojan 4 logoTurkojan 4 Turkey ๐Ÿ‡น๐Ÿ‡ท FยตNGยตยง Delphi Feb, 2008
Turkojan 4.0 logoTurkojan 4.0 Turkey ๐Ÿ‡น๐Ÿ‡ท Fungus Delphi Mar, 2008
sharK 3.1 fwb++ logosharK 3.1 fwb++ Germany ๐Ÿ‡ฉ๐Ÿ‡ช sNiper109 , rockZ Visual Basic 6 (VB6) Mar, 2008
Lost Door 2.2 logoLost Door 2.2 Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) May, 2008
SynRAT 1.0 logoSynRAT 1.0 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi Aug, 2008
SynRAT 2.0 logoSynRAT 2.0 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi Oct, 2008
Aero 2 logoAero 2 Unknown ๐Ÿดโ€โ˜ ๏ธ Gareth Delphi Oct, 2008
SynRAT 2.1 logoSynRAT 2.1 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi Oct, 2008
Stream RAT 1.0 logoStream RAT 1.0 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Marjinz Visual Basic 6 (VB6) Dec, 2008
Lost Door 3.0 Stable logoLost Door 3.0 Stable Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Mar, 2009
SynRAT 4.0.1 logoSynRAT 4.0.1 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi May, 2009
PrjRAPTOR 1.8 logoPrjRAPTOR 1.8 United States ๐Ÿ‡บ๐Ÿ‡ธ Ryan.M Visual Basic 6 (VB6) Jul, 2009
Cerberus 1.0 Beta logoCerberus 1.0 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Aug, 2009
Cerberus 1.01 Beta logoCerberus 1.01 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Aug, 2009
Cerberus 1.02 Beta logoCerberus 1.02 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Aug, 2009
SynRAT 4.3.1-A-1 logoSynRAT 4.3.1-A-1 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Assembly, Delphi Aug, 2009
Apocalypse RAT 1.4 logoApocalypse RAT 1.4 Turkey ๐Ÿ‡น๐Ÿ‡ท ap0calypse Delphi Aug, 2009
Cerberus 1.03.4 logoCerberus 1.03.4 United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Sep, 2009
Spy-Net 2.6 logoSpy-Net 2.6 Brazil ๐Ÿ‡ง๐Ÿ‡ท Raphael Delphi Oct, 2009
DarkComet RAT 1.3 logoDarkComet RAT 1.3 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Assembly, Delphi Nov, 2009