This Trojan is a specially crafted .XLS file that takes advantage of the following software vulnerability to drop possibly malicious files:
- Microsoft Security Bulletin MS08-014
The said vulnerability allows a malicious .XLS file to drop and execute an embedded executable file.
More...