General
- Target nfregdrv.exe
- Size 3.6MB
- Sample260803-b7nplsal91
- SHA256 01a9ccff60dbdf2dce2a6304f01c51ab32b03029fb4648394fb715bc1dc2ce5b
- MD5 de7218aed3ac1635468ee8f3a3b45b9c
- SHA1 c49f1acd0593546d0aaac5de23e92ff6c82c03e8
- SHA512 d46da180eaec6f33ecf6b44f1067c0e5bfc1655d53174467155aa5a32169b741ad93f6f01debe81cc9c863bdbe1ca21420bf595bd4c7cd39a3e40ee6dddb2535
- SSDEEP 98304:P9pu81M/MJaxGER+fOAq2Z+HK3aBJWhrGgLA7MCrOc:Pn1M/MJzERaOA++NLvLc
- TLSH T13B0623AF5BCB2EF0D01ECF74C94971ACB06D3B968AA1DC15B7CD190E4E9222ADD31251
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nfregdrv.exe
Resource
win10ltsc2021-20260513-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target nfregdrv.exe
- Size 3.6MB
- SHA256 01a9ccff60dbdf2dce2a6304f01c51ab32b03029fb4648394fb715bc1dc2ce5b
- MD5 de7218aed3ac1635468ee8f3a3b45b9c
- SHA1 c49f1acd0593546d0aaac5de23e92ff6c82c03e8
- SHA512 d46da180eaec6f33ecf6b44f1067c0e5bfc1655d53174467155aa5a32169b741ad93f6f01debe81cc9c863bdbe1ca21420bf595bd4c7cd39a3e40ee6dddb2535
- SSDEEP 98304:P9pu81M/MJaxGER+fOAq2Z+HK3aBJWhrGgLA7MCrOc:Pn1M/MJzERaOA++NLvLc
- TLSH T13B0623AF5BCB2EF0D01ECF74C94971ACB06D3B968AA1DC15B7CD190E4E9222ADD31251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1