#ParsedReport #CompletenessHigh
10-09-2026

FTP Banner Dead Drops: A Hunter’s Field Guide to E4del and PINHOLE

https://www.rstcloud.com/ftp-banner-dead-drops-a-hunters-field-guide-to-e4del-and-pinhole/

Report completeness: High

Threats:
E4del
Pinhole
Dead_drop_technique
Apc_injection_technique
Lolbin_technique
Bitsadmin_tool
Process_injection_technique

Victims:
Windows systems

Geo:
London, Los angeles

TTPs:

ChatGPT TTPs:
do not use without manual check
T1036, T1055, T1055.004, T1059, T1059.001, T1070.004, T1071.001, T1071.002, T1083, T1090, have more...

IOCs:
File: 27
Registry: 2
Path: 3
IP: 6
Command: 1
Url: 2
Domain: 1

Soft:
Node.js, Electron, Discord, ConPTY, Windows Terminal, OpenSSH, curl, winscp, coreftp, cyberduck, have more...

Algorithms:
sha256, zip

Functions:
count

Win Services:
BITS, WebClient

Languages:
javascript, powershell, cscript