dragonforce

Tactics and techniques attributed to DRAGONFORCE by ransomware.live's curated TTP catalog. Identifiers link to the canonical MITRE ATT&CK reference for each tactic or sub-technique.

• TA0002Execution
  • T1204.002User Execution

    Executes a malicious file on the victim's system.

• TA0005Defense Evasion
  • T1070.004Indicator Removal: File Deletion

    The ransomware self-deletes after execution.

  • T1562.001Impair Defenses: Disable or Modify Tools

    Disables Windows Defender (if it is running).

• TA0007Discovery
  • T1083File and Directory Discovery

    The ransomware enumerates directories to encrypt files.

• TA0040Impact
  • T1486Data Encrypted for Impact

    The ransomware uses data encryption to extort the victim.