General
- Target https://download.tradefy.com.br/client/V4/TF.application
- Sample261002-j79k3syfnd
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://download.tradefy.com.br/client/V4/TF.application
Resource
win10v2004-20260911-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target https://download.tradefy.com.br/client/V4/TF.application
-
Renames multiple (107) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1