The xlsb attachment downloads a powershell which recover a zip document. Inside, there is the malware (aka Java RAT or jRAT).
The new phase of the Deterrence of Terrorism operation against Isis begins. SDF and Inherent Resolve attack Islamic State cells between Deir Ezzor and Hasaka on Shaddadi Road
New phase of the SDF-Inherent Resolve, Deterrence of Terorrism, anti-Isis operation in Deir Ezzor. The maneuvers, resumed in the last few days, involve the area from Busayrah, Shahil and Dhiban north on the Al-Shaddadi road, leading to the capture of 25 terrorists and a commander, as well as the seizure of numerous explosives. They restarted at the request of local tribes, who denounced an increase in attacks by the Islamic State against the civilian population in the Syrian province. Objective: to dismantle the jihadist cells and their logistic and support network. Especially after Daesh’s attacks, robberies and kidnappings have multiplied. The militiamen on the one hand want to recover space and weight, lost as a result of the constant military defeats suffered. On the other hand, they are trying to find resources, necessary for their survival. Not surprisingly, in the area there has been an important growth in extortionate criminal acts.
Meanwhile, the hunt for Daesh leaders continues throughout the area
Meanwhile, the SDF and Inherent Resolve are continuing the silent campaign to eliminate Isis leadership in eastern Syria. In recent days there have been new targeted raids Deir Ezzor and Hasaka, which have led to the capture of several Islamic State commanders. No details were given about the operations, but all have in common the fact that they were directed towards one or two Daesh terrorists. The latest was arrested on 13 July in Jdeid Akidat (Deir Ezzor). The maneuvers are attended by the Kurdish Special Forces (HAT) and those of the Coalition, which provide mentoring and support both on the ground and during the planning of the activities. In this context, the new phase of Deterrence of Terrorism is complementary.