General
- Target UXCryptor.exe
- Size 53KB
- Sample260704-the1aadv8l
- SHA256 37c653312a83fb0409adf3d2151a2b3738f2dbc12c59e6772f304de95275a7eb
- MD5 319f08ac52c90abf615e20ce2319cc35
- SHA1 af2036568da625ffca28bef6cc7da3856641395f
- SHA512 35afcac86c3538dbcbd5f8bbd009f3c372e842da7d97528158af9db5fc4cea08796caaa7e3908f74579d242fc3c6f0e749a31f0a82c23db856eb6b1fef69c954
- SSDEEP 1536:1S/wZa/hnsHKKft5fbbmXdnJbn8Y8EbwVcl:wwZLlJbbm5Jb8HEbqY
- TLSH T10C33F84173AD9763F2BE56751931A28502F6F9122232CA6E3ECD51DD2AF3F0057227A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260630-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 53KB
- SHA256 37c653312a83fb0409adf3d2151a2b3738f2dbc12c59e6772f304de95275a7eb
- MD5 319f08ac52c90abf615e20ce2319cc35
- SHA1 af2036568da625ffca28bef6cc7da3856641395f
- SHA512 35afcac86c3538dbcbd5f8bbd009f3c372e842da7d97528158af9db5fc4cea08796caaa7e3908f74579d242fc3c6f0e749a31f0a82c23db856eb6b1fef69c954
- SSDEEP 1536:1S/wZa/hnsHKKft5fbbmXdnJbn8Y8EbwVcl:wwZLlJbbm5Jb8HEbqY
- TLSH T10C33F84173AD9763F2BE56751931A28502F6F9122232CA6E3ECD51DD2AF3F0057227A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4