Overview

overview

8

Static

static

1

disable_vu...st.reg

windows10-2004-x64

7

disable_vu...st.reg

windows10-ltsc_2021-x64

8

disable_vu...st.reg

windows11-21h2-x64

8

disable_vu...st.reg

windows11-ltsc_2024-x64

8

Resubmissions

02/08/2026, 17:19

260802-vwcyhsdb96

02/08/2026, 17:14

260802-vsac8adk2w8

Analysis

  • max time kernel
    898s
  • max time network
    413s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/08/2026, 17:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    disable_vulnerable_driver_blocklist.reg
  • Size 572B
  • Sample260802-vsac8adk2w
  • SHA256 6842af61b0de05f9c0d135b6b7651a3cf79596550dfc09089711a0f64aab1833
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

  • Modify Registry: Disable Windows Driver Blocklist 2 TTPs 1 IoCs

    Disable Windows Driver Blocklist via Registry.

    defense_evasion
  • Runs .reg file with regedit 1 IoCs

Processes

  • C:\Windows\regedit.exe
    regedit.exe "C:\Users\Admin\AppData\Local\Temp\disable_vulnerable_driver_blocklist.reg"
    1⤵
    • Modify Registry: Disable Windows Driver Blocklist
    • Runs .reg file with regedit
    PID:3396

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads