General

  • Target
    https://download.tradefy.com.br/client/V4/TF.application
  • Sample261002-j79k3syfnd

Malware Config

Targets

    • Target
      https://download.tradefy.com.br/client/V4/TF.application
    • Renames multiple (107) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks