MALICIOUS — 4a846bae3788dda9e86d66abb78b9824d2cba5ce14c5e601239e0a87b559bf75

Verdict: malicious (100/100) · Family: Phishing

File type: pdf · SHA-256: 4a846bae3788dda9e86d66abb78b9824d2cba5ce14c5e601239e0a87b559bf75

MITRE ATT&CK

5777 behavior events · 1 ATT&CK techniques · 3 dropped files.

www.msftconnecttest.com
inference.location.live.net
desktop-hsgcbep._dosvc._tcp.local
ntp.ubuntu.com
250.255.255.239.in-addr.arpa
http://www.msftconnecttest.com/connecttest.txt
http://203.26.79.13/filestreamingservice//files/736bdc20-582e-46c5-ba31-d31d3d97258e/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/736bdc20-582e-46c5-ba31-d31d3d97258e?P1=1786289239&P2=404&P3=2&P4=hItXwv%2bTDC%2fQfJpOMbhxZq2Yo7NXb4w7cGJKBiOb70xRTjcOWbFgk7XGlPKLq9FVHi4XQof0kjLYy2ku%2fUsIKA%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice//files/c48ae315-f580-4b6c-801e-58a0f885749d/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/c48ae315-f580-4b6c-801e-58a0f885749d?P1=1786289299&P2=404&P3=2&P4=STafWN7XnhERFkq0APDu6NVCO%2bpT05o170d3m4yIC%2fTAEqfdvDQJXYZg%2fuQTKvDVWg3dbXtgnsP3lw59E9%2fnVQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
23.40.52.209
20.190.142.167
23.33.238.178
52.110.12.54
52.110.12.40
4.230.171.124
52.253.84.76
20.42.179.192
23.33.238.102
74.178.240.61

Analyzed on MalwareAnalyzer by Cyble · Open interactive report