MALICIOUS — 4f6f1a48b4b3f5755827299228d4bb5ef05759408ab28c59ea8f0317dacfcaaa

Verdict: malicious (98/100) · Family: unknown

File type: pe · SHA-256: 4f6f1a48b4b3f5755827299228d4bb5ef05759408ab28c59ea8f0317dacfcaaa

MITRE ATT&CK

• T1543.003
• T1112

YARA

Dynamic analysis (windows)

49719 behavior events · 2 ATT&CK techniques · 10 dropped files.

Runtime network

• www.msftconnecttest.com
• inference.location.live.net
• http://www.msftconnecttest.com/connecttest.txt
• 23.40.52.209
• 48.211.4.16
• 4.150.223.103
• 172.192.176.118
• 23.33.238.178
• 20.42.179.204
• 4.230.171.124
• 40.126.14.163
• 192.168.122.106
• 4.144.132.114
• 20.184.175.20
• 150.171.22.17
• 172.178.240.162
• 52.123.252.192
• 72.154.7.111
• 23.221.133.185
• 224.0.0.252

Analyzed on MalwareAnalyzer by Cyble · Open interactive report