That sample was seen (still available) from: https://official-teams-storage[.]com/files_dws_arch/...

Summary

A malware sample disguised as Microsoft Teams (MTSetup_v15.3.7191.msi) was discovered hosted on a spoofed domain (official-teams-storage[.]com) mimicking legitimate Microsoft infrastructure. The file remains available and represents a supply-chain-style attack leveraging brand impersonation to distribute malware to unsuspecting users.

Indicators of Compromise

• domain — official-teams-storage.com
• url — https://official-teams-storage.com/files_dws_arch/MTSetup_v15.3.7191.msi
• malware — MTSetup_v15.3.7191.msi