MALICIOUS — root_.config_libreoffice_4_user_gallery_sg30.sdv

Verdict: malicious (83/100) · Family: unknown

File type: office-ole · SHA-256: 65365530165a871772e21962a5d7dda107d8d010f329bf59c878eabc3465bbe4

MITRE ATT&CK

1253 behavior events · 1 ATT&CK techniques · 21 dropped files.

www.msftconnecttest.com
inference.location.live.net
250.255.255.239.in-addr.arpa
ntp.ubuntu.com
WORKGROUP
_dosvc._tcp.local
http://www.msftconnecttest.com/connecttest.txt
http://203.26.79.13/filestreamingservice//files/736bdc20-582e-46c5-ba31-d31d3d97258e/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/736bdc20-582e-46c5-ba31-d31d3d97258e?P1=1786228806&P2=404&P3=2&P4=gV%2bAkSY7VzOHJIQWO3X2B5rF%2f%2b3rAGT59wOr1F23s%2f1qWCjKmvsF7VE70UwYIZhiW9yXbCRNLuA2rzih2nbGBw%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice//files/c48ae315-f580-4b6c-801e-58a0f885749d/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/c48ae315-f580-4b6c-801e-58a0f885749d?P1=1786228851&P2=404&P3=2&P4=BDpv0EmVzqd7kUXjOH27L650z9O43Ao8J2DHucaYj1%2bFGJYk49HrDYDAyELcp8RIo3lkZneyUEkZY4WtZH2YAg%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
23.40.52.85
20.190.142.165
20.247.185.124
23.198.40.44
135.232.92.34
52.110.12.10
4.230.171.124
23.33.238.171
23.33.238.102

Analyzed on MalwareAnalyzer by Cyble · Open interactive report