MALICIOUS — fa55db9ae8d88f6a6871fe6bd18d7c53c5bee374c4e341dbe51fe50f3d8cb522

Verdict: malicious (91/100) · Family: unknown

File type: pdf · SHA-256: fa55db9ae8d88f6a6871fe6bd18d7c53c5bee374c4e341dbe51fe50f3d8cb522

MITRE ATT&CK

9675 behavior events · 1 ATT&CK techniques · 4 dropped files.

www.msftconnecttest.com
inference.location.live.net
_dosvc._tcp.local
desktop-hsgcbep._dosvc._tcp.local
ntp.ubuntu.com
http://www.msftconnecttest.com/connecttest.txt
http://203.26.79.13/filestreamingservice//files/736bdc20-582e-46c5-ba31-d31d3d97258e/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/736bdc20-582e-46c5-ba31-d31d3d97258e?P1=1786308481&P2=404&P3=2&P4=CrrpTTbZhpMo1IR5r1FQfQX5KPYcFUB47fZmFyR1XtrDXjFi1x%2bKevp%2bTrdrBKnbwyYxaQafxxoDNAK6iTZwyg%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice//files/c48ae315-f580-4b6c-801e-58a0f885749d/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com
http://203.26.79.13/filestreamingservice/files/c48ae315-f580-4b6c-801e-58a0f885749d?P1=1786308539&P2=404&P3=2&P4=Zzwv%2bwx30ru1XFm5IBdEGryZHuCQz%2bmfIwRDfC5oD9FNYRABTXU3%2b58VkbyXGOea1FPPEfhKb2CAFjClrIm4Yw%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com
23.40.52.209
40.126.14.164
52.123.252.212
20.247.184.142
23.33.238.178
135.233.95.80
52.110.12.10
4.230.171.124
23.33.238.207
23.221.133.185

Analyzed on MalwareAnalyzer by Cyble · Open interactive report