General
-
Target
ldvb.exe
-
Size
1KB
-
Sample
241119-w2p1pszclf
-
MD5
eefbb9e4a9fd600d019cac1535868014
-
SHA1
d24a2c0f2b6732bfe9de1c48e4ae6e11242948aa
-
SHA256
9e06d175c76b3457bba2b4fbd688edcab82a5a55cff9be746d8fefbb0b637ab4
-
SHA512
22537357f3436cfb20c97f05cc86a6b563783416a808323d6228bc7ee1c16a47ac6ee311014cdb2435d3b60e110dcbd1ff3781ae590f25a175f8d941fee84e72
Static task
static1
Behavioral task
behavioral1
Sample
ldvb.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ldvb.vbs
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
ldvb.exe
-
Size
1KB
-
MD5
eefbb9e4a9fd600d019cac1535868014
-
SHA1
d24a2c0f2b6732bfe9de1c48e4ae6e11242948aa
-
SHA256
9e06d175c76b3457bba2b4fbd688edcab82a5a55cff9be746d8fefbb0b637ab4
-
SHA512
22537357f3436cfb20c97f05cc86a6b563783416a808323d6228bc7ee1c16a47ac6ee311014cdb2435d3b60e110dcbd1ff3781ae590f25a175f8d941fee84e72
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-