FTPInjectorLoader
Generic FTP+HTTP dual-channel loader/injector PE32 x86. VirtualAllocEx + WriteProcessMemory for process injection. FtpOpenFileW + FtpGetFileSize for FTP payload download. HttpSendRequest for HTTP C2. CryptAcquireContextA + CryptCreateHash + XOR for payload encryption. AdjustTokenPrivileges for privilege escalation. No cleartext C2 IOCs (encrypted).
Tehdit Profili
Tür
Loader
Yazılım DiliC/C++
C2 ProtokolüFTP/HTTP
İlk Görülme2024
Hedef Kitle
Kuresel
Amaç / Yetenekler
- Loader/Injector
Bu aile için henüz C2 sunucusu tespit edilmemiştir.
Araştırma Raporları (1)
FTPInjectorLoader 00f01750 -- VirtualAllocEx WriteProcessMemory Process Injection FtpOpenFileW HTTP InternetSendRequest XOR CryptAcquireContextA AdjustTokenPrivileges | Orta
FTPInjectorLoader 00f01750 PE32 GUI x86 1.4MB. VirtualAllocEx WriteProcessMemory process injection. FtpOpenFileW FtpGetFileSize FTP kanal. HttpSendRequest HTTP. XOR + CryptAcquireContextA.
Raporu Oku →