General
Static task
static1
URLScan task
urlscan1
Malware Config
Targets
-
-
Target
https://vvp98.app.goo.gl/?link=https://www.google.com/amp/s/PDF-31261965-PDF.makhamzanwadi2nw.sch.id
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-