General
- Target UXCryptor.exe
- Size 126KB
- Sample260704-sebb9acw5j
- SHA256 b80be77639e7b902fa112ece46917278fc833488c2a2cef71310fdf2d1473503
- MD5 436e0b307a0acf2f8ae1e3250682b325
- SHA1 8eab8d1b51a8d2bc263de70af3358f2d79973ed0
- SHA512 06f8220e0a1ba818a3001704beb7f9aea8fc95cc2e9e98312863078d521f3bd12962a95a803a93ff0acec28ca9959047b65b307108b80e46030f9effab5943d0
- SSDEEP 3072:X9Jcs3MG6m1CpwwwbR0ybb5MWcGaKaWR2ymmF2RfaU9hqY:LXnbHMHGau2ukaUnq
- TLSH T12DC37B0473E99B20D2BDAB76487BF20113FBE416CB33DA2D7ECD65891BA3A018751752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 126KB
- SHA256 b80be77639e7b902fa112ece46917278fc833488c2a2cef71310fdf2d1473503
- MD5 436e0b307a0acf2f8ae1e3250682b325
- SHA1 8eab8d1b51a8d2bc263de70af3358f2d79973ed0
- SHA512 06f8220e0a1ba818a3001704beb7f9aea8fc95cc2e9e98312863078d521f3bd12962a95a803a93ff0acec28ca9959047b65b307108b80e46030f9effab5943d0
- SSDEEP 3072:X9Jcs3MG6m1CpwwwbR0ybb5MWcGaKaWR2ymmF2RfaU9hqY:LXnbHMHGau2ukaUnq
- TLSH T12DC37B0473E99B20D2BDAB76487BF20113FBE416CB33DA2D7ECD65891BA3A018751752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4