The xlsb attachment on how to protect yourself on Black Friday-Cyber Monday contacts random link from an internal list and downloads the dll, starting malware infection.
The xlsb attachment contacts random links from an internal list and downloads the dll, starting the malware infection. It also tries to connect to the victim's email client.