General

  • Target

    https://vvp98.app.goo.gl/?link=https://www.google.com/amp/s/PDF-31261965-PDF.makhamzanwadi2nw.sch.id

  • Sample

    230520-pzapnscc58

Score
10/10

Malware Config

Targets

    • Target

      https://vvp98.app.goo.gl/?link=https://www.google.com/amp/s/PDF-31261965-PDF.makhamzanwadi2nw.sch.id

    Score
    10/10
    • UAC bypass

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks