99c2474f5bea6e3955d1002aa98678c32e9c0e9f2fb6d0c35d3a428ec279d103 | Triage

Submit
Reports

Overview

overview

Static

static

PCProtect_Setup.exe

windows11-21h2-x64

8

mscordbi.dll

windows11-21h2-x64

1

mscorlib.dll

windows11-21h2-x64

1

mscorrc.debug.dll

windows11-21h2-x64

1

mscorrc.dll

windows11-21h2-x64

1

netstandard.dll

windows11-21h2-x64

1

nfapi.dll

windows11-21h2-x64

1

nfregdrv.exe

windows11-21h2-x64

1

ovpn/libcr..._1.dll

windows11-21h2-x64

3

ovpn/liblzo2-2.dll

windows11-21h2-x64

3

ovpn/libpk...-1.dll

windows11-21h2-x64

3

ovpn/libssl-1_1.dll

windows11-21h2-x64

1

ovpn/openvpn.exe

windows11-21h2-x64

1

ovpn/openvpn_down.bat

windows11-21h2-x64

1

ovpn/openvpn_up.bat

windows11-21h2-x64

1

protected_...am.sys

windows11-21h2-x64

1

protected_...am.sys

windows11-21h2-x64

1

pwm.dll

windows11-21h2-x64

1

sni.dll

windows11-21h2-x64

1

ucrtbase.dll

windows11-21h2-x64

1

urldrv/tdi...er.sys

windows11-21h2-x64

1

urldrv/tdi...er.sys

windows11-21h2-x64

1

urldrv/wfp...er.sys

windows11-21h2-x64

1

urldrv/wfp...er.sys

windows11-21h2-x64

1

urldrv/wfp...er.sys

windows11-21h2-x64

1

urldrv/wfp...er.sys

windows11-21h2-x64

1

urldrv/wfp...er.sys

windows11-21h2-x64

1

urldrv/wfp...er.sys

windows11-21h2-x64

1

vcruntime140_cor3.dll

windows11-21h2-x64

3

wpfgfx_cor3.dll

windows11-21h2-x64

1

wscf.exe

windows11-21h2-x64

1

x86/update.dll

windows11-21h2-x64

3

Analysis

max time kernel
129s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20231215-en
resource tags

arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
submitted
13-01-2024 04:44

Sharing

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

PCProtect_Setup.exe

Resource

win11-20231215-en

persistence upx

windows11-21h2-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

mscordbi.dll

Resource

win11-20231215-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

mscorlib.dll

Resource

win11-20231222-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

mscorrc.debug.dll

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

mscorrc.dll

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

netstandard.dll

Resource

win11-20231215-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

nfapi.dll

Resource

win11-20231215-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

nfregdrv.exe

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

ovpn/libcrypto-1_1.dll

Resource

win11-20231215-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

ovpn/liblzo2-2.dll

Resource

win11-20231215-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

ovpn/libpkcs11-helper-1.dll

Resource

win11-20231215-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

ovpn/libssl-1_1.dll

Resource

win11-20231222-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

ovpn/openvpn.exe

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

ovpn/openvpn_down.bat

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

ovpn/openvpn_up.bat

Resource

win11-20231222-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

protected_elam/amd64/protected_elam.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

protected_elam/x86/protected_elam.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

pwm.dll

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

sni.dll

Resource

win11-20231215-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

ucrtbase.dll

Resource

win11-20231215-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

urldrv/tdi/amd64/webshieldfilter.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

urldrv/tdi/i386/webshieldfilter.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

urldrv/wfp/win10/amd64/webshieldfilter.sys

Resource

win11-20231222-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

urldrv/wfp/win10/i386/webshieldfilter.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

urldrv/wfp/win7/amd64/webshieldfilter.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

urldrv/wfp/win7/i386/webshieldfilter.sys

Resource

win11-20231222-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

urldrv/wfp/win8/amd64/webshieldfilter.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

urldrv/wfp/win8/i386/webshieldfilter.sys

Resource

win11-20231215-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

vcruntime140_cor3.dll

Resource

win11-20231215-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wpfgfx_cor3.dll

Resource

win11-20231215-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

wscf.exe

Resource

win11-20231222-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

x86/update.dll

Resource

win11-20231215-en

windows11-21h2-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

nfregdrv.exe
Size

48KB
MD5

01b5780505301ada6dc102fb77b2298c
SHA1

328c3931a54af2d7adb88ba4c4c18ce1af8d5a72
SHA256

aad2d85472448abe8250cf3180c3d0373540f46e8a8e76d8ef2f78db62be0812
SHA512

bc5bd91c46f452a76ae0595287622256e8c79e90158171bedf6b68d4439dfefceb06948bd49deb0aeb1344ce89a312bb87b01e2daf3880729fff642951c33947
SSDEEP

768:2/1x+sxHjR9Q9V0nczMWkL/zDJ6kqsEtm:YjR8VfRkL0Jtm

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\nfregdrv.exe
"C:\Users\Admin\AppData\Local\Temp\nfregdrv.exe"
1⤵
PID:3412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy