Description

The File Manager feature in malware serves as a Swiss Army knife for cybercriminals, enabling them to list, download, upload, or delete files on a compromised system. Acting as an illicit file explorer, this feature provides comprehensive access to the victim's stored data, whether it's sensitive personal information, valuable intellectual property, or configuration files that can be manipulated for further compromise. The ability to upload files also means the attacker can place additional malicious payloads or tools on the system, facilitating a deeper level of exploitation. Likewise, the download function allows for easy exfiltration of valuable or sensitive data. Deleting files can either be used to cover tracks or cause harm, making the File Manager feature a versatile tool in the arsenal of a cybercriminal.

Categories File System, Alteration, Disruption, Exfiltration
Dangerousness High

Existing Techniques

Name Associated Feature(s) Has Snippet Matching Sample
Execute Programs logoExecute Programs File Manager, Shell Access 0
File Search logoFile Search File Manager 0
File System Enumeration logoFile System Enumeration File Manager 0
Network Shares Enumeration logoNetwork Shares Enumeration File Manager, Network Manager 0

Associated with Releases

Version Origins Authors Languages Release Date
Back Orifice 1.20 logoBack Orifice 1.20 United States 🇺🇸 Cult of the Dead Cow (cDc) C++ Jul, 1998
NetBus 1.70 logoNetBus 1.70 Sweden 🇸🇪 cf Delphi Nov, 1998
SubSeven 1.0 logoSubSeven 1.0 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 1999
SubSeven 1.1 logoSubSeven 1.1 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.2 logoSubSeven 1.2 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.3 logoSubSeven 1.3 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.4 logoSubSeven 1.4 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.5 logoSubSeven 1.5 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 1999
SubSeven 1.6 logoSubSeven 1.6 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 1999
SubSeven 1.7 logoSubSeven 1.7 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi May, 1999
SubSeven 1.8 logoSubSeven 1.8 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi May, 1999
SubSeven 1.9 logoSubSeven 1.9 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jun, 1999
Back Orifice 2000 (BO2K) 1.0 logoBack Orifice 2000 (BO2K) 1.0 United States 🇺🇸 Cult of the Dead Cow (cDc) C++ Jul, 1999
Vampire 1.2 logoVampire 1.2 Unknown 🏴‍☠️ Ju1c3 Visual Basic 6 (VB6) Jul, 1999
SubSeven 1.9 Apocalypse logoSubSeven 1.9 Apocalypse Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Aug, 1999
SubSeven 2.0 logoSubSeven 2.0 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Sep, 1999
SchoolBus 2.0 logoSchoolBus 2.0 Turkey 🇹🇷 Serdar Kabaoglu Delphi Oct, 1999
SubSeven 2.1 logoSubSeven 2.1 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Nov, 1999
Hack a Tack 2000 logoHack a Tack 2000 Unknown 🏴‍☠️ The Bart33 , Da SuckA Delphi Feb, 2000
SubSeven 2.1.1 GOLD edition logoSubSeven 2.1.1 GOLD edition Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2000
SubSeven 2.1.2 M.U.I.E logoSubSeven 2.1.2 M.U.I.E Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 2000
Y3K rat 1.0 logoY3K rat 1.0 Greece 🇬🇷 firelarm , Chucky Delphi May, 2000
SubSeven 2.1.3 BONUS logoSubSeven 2.1.3 BONUS Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jun, 2000
SubSeven 2.1.4 DEFCON 8 logoSubSeven 2.1.4 DEFCON 8 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jul, 2000
Y3K rat 1.5 logoY3K rat 1.5 Greece 🇬🇷 firelarm , Chucky Delphi Jan, 2001
SubSeven 2.2 logoSubSeven 2.2 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 2001
Y3K rat 1.6 MS logoY3K rat 1.6 MS Greece 🇬🇷 firelarm , Chucky Delphi Jul, 2001
Optix Pro 1.0 logoOptix Pro 1.0 Unknown 🏴‍☠️ s13az3 Delphi Apr, 2002
Net-Devil 1.5 logoNet-Devil 1.5 Unknown 🏴‍☠️ Nilez Delphi Jul, 2002
Ghost 2.4 logoGhost 2.4 Israel 🇮🇱 Lame_Joker Visual Basic 6 (VB6) Sep, 2002
Beast 1.7 logoBeast 1.7 Romania 🇷🇴 Tataye Delphi Oct, 2002
Beast 1.8 logoBeast 1.8 Romania 🇷🇴 Tataye Delphi Nov, 2002
MoSucker 3.0b logoMoSucker 3.0b Germany 🇩🇪 Superchachi Visual Basic 6 (VB6) Nov, 2002
Beast 1.90 logoBeast 1.90 Romania 🇷🇴 Tataye Delphi Dec, 2002
Turkojan 1.0 logoTurkojan 1.0 Turkey 🇹🇷 Fungus Delphi Jan, 2003
Beast 1.91 logoBeast 1.91 Romania 🇷🇴 Tataye Delphi Jan, 2003
Beast 1.92 logoBeast 1.92 Romania 🇷🇴 Tataye Delphi Feb, 2003
SubSeven 2.1.5 Legends logoSubSeven 2.1.5 Legends Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2003
CIA 1.0 logoCIA 1.0 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Mar, 2003
CIA 1.1 logoCIA 1.1 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Apr, 2003
Beast 2.00 logoBeast 2.00 Romania 🇷🇴 Tataye Delphi May, 2003
Beast 2.01 logoBeast 2.01 Romania 🇷🇴 Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia 🇦🇺 Read101 Delphi Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown 🏴‍☠️ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.05 logoBeast 2.05 Romania 🇷🇴 Tataye Delphi Sep, 2003
Beast 2.02 logoBeast 2.02 Romania 🇷🇴 Tataye Delphi Sep, 2003
Sinique 1.0 logoSinique 1.0 Unknown 🏴‍☠️ xtremeNTL Delphi Oct, 2003
Fearless Lite 1.01 logoFearless Lite 1.01 Australia 🇦🇺, France 🇫🇷 Read101 , Triforce Delphi Nov, 2003
ProRat 1.1 logoProRat 1.1 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004