The Reveal Platform
Intel Name: Technical analysis of transferloader
Date of Scan: May 16, 2025
Impact: High
Summary: TransferLoader is a newly identified malware loader active since February 2025, comprising a downloader, loader, and backdoor module. It was observed deploying Morpheus ransomware at a U.S. law firm. The malware uses heavy obfuscation to hinder analysis and enables remote command execution. Its backdoor leverages IPFS as a fallback for C2 updates.
