MALICIOUS — rovefelutisi.pdf

Verdict: malicious (100/100) · Family: Phishing

File type: pdf · SHA-256: 51a1d808cc594459f07719a61c108e96db104d7bc50e659e1b93889cfe72f55f

MITRE ATT&CK

9702 behavior events · 1 ATT&CK techniques · 4 dropped files.

www.msftconnecttest.com
inference.location.live.net
250.255.255.239.in-addr.arpa
desktop-hsgcbep
http://www.msftconnecttest.com/connecttest.txt
http://203.26.79.13/filestreamingservice//files/736bdc20-582e-46c5-ba31-d31d3d97258e/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/736bdc20-582e-46c5-ba31-d31d3d97258e?P1=1786554873&P2=404&P3=2&P4=AERCm9c6JdOKf76b8k0Tnf%2fVB7ILdKcEi4aB8SSRz0fI4KNgtM%2bXsTrEV4gdz3mouumk5XW3SnCuP7jdiEPSVg%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice//files/c48ae315-f580-4b6c-801e-58a0f885749d/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/c48ae315-f580-4b6c-801e-58a0f885749d?P1=1786554899&P2=404&P3=2&P4=O6RU9JE6GquLJzn02DF6%2fpYAkey7DxVcGDTnmWWu48koMouiFFCaNTKFwfi%2fWBzRWyzFhkJFRwQ02hPcKz9DrA%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
23.40.52.85
20.190.167.20
52.230.60.54
23.33.238.178
131.253.33.203
23.198.40.44
23.11.37.157
52.110.12.8
4.230.171.124
23.33.238.173
74.179.71.159

Analyzed on MalwareAnalyzer by Cyble · Open interactive report