General
- Target UXCryptor.exe
- Size 53KB
- Sample260704-thx6vsdv9k
- SHA256 0627bc334ff72ae4db4bf7921999abf864c452de258ee927f0ab974860feacea
- MD5 15c4f6d7e3fc6dda13b8572f2c97634b
- SHA1 5b5c77f69adb05f6d5b235bb9ce0b4fe9849ae33
- SHA512 e09dd953950dc5f7438e16e5b4e4cb87ef7303cc700453e5a4b1d4893cdf4db52f01fc3bc063861713dae358f049f615f59d6ff423653d1a38c0218da3110a34
- SSDEEP 1536:BS/wZaAxFn1HKKft5fbbmXdnJb98Y8JbwVcl:EwZrlJbbm5JbGHJbqY
- TLSH T1CD33F84173AD9B63F2BE56751931A28502F3E9122532CA6E3ECD51DD2AF3F0057227A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 53KB
- SHA256 0627bc334ff72ae4db4bf7921999abf864c452de258ee927f0ab974860feacea
- MD5 15c4f6d7e3fc6dda13b8572f2c97634b
- SHA1 5b5c77f69adb05f6d5b235bb9ce0b4fe9849ae33
- SHA512 e09dd953950dc5f7438e16e5b4e4cb87ef7303cc700453e5a4b1d4893cdf4db52f01fc3bc063861713dae358f049f615f59d6ff423653d1a38c0218da3110a34
- SSDEEP 1536:BS/wZaAxFn1HKKft5fbbmXdnJb98Y8JbwVcl:EwZrlJbbm5JbGHJbqY
- TLSH T1CD33F84173AD9B63F2BE56751931A28502F3E9122532CA6E3ECD51DD2AF3F0057227A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4