MALICIOUS — 0d4f1d87798b83be37c3b8723b8be93f978a5f51bc96958e8f927c1d22a59e88.docx

Verdict: malicious (85/100) · Family: unknown

File type: office-ooxml · SHA-256: 0d4f1d87798b83be37c3b8723b8be93f978a5f51bc96958e8f927c1d22a59e88

MITRE ATT&CK

1148 behavior events · 1 ATT&CK techniques · 25 dropped files.

www.msftconnecttest.com
inference.location.live.net
ntp.ubuntu.com
http://www.msftconnecttest.com/connecttest.txt
http://203.26.79.13/filestreamingservice//files/736bdc20-582e-46c5-ba31-d31d3d97258e/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/736bdc20-582e-46c5-ba31-d31d3d97258e?P1=1786431982&P2=404&P3=2&P4=dsaTgTfAausK5dc9yB5mIxB9HU3kjgyOqc%2fOHNRqsdlX%2fwUpF%2fnoFblWZipasqR1TynuWjINV4AE5OQB1T4Ibw%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
23.40.52.209
20.190.167.20
23.33.238.135
23.198.40.44
52.110.12.22
57.154.63.210
4.230.171.124
23.33.238.171
23.33.238.114
20.247.184.142
23.221.133.185
203.26.79.13
23.40.52.174
20.42.65.91

Analyzed on MalwareAnalyzer by Cyble · Open interactive report