General
- Target UXCryptor.exe
- Size 56KB
- Sample260704-w4mncsfx6q
- SHA256 7608ada9b3a0520fc8d1ff8f0c46cdff7e2d691824447546767cfac1d827a904
- MD5 194b1cf3b3631fb1c1f2d58dd36ac5ff
- SHA1 bc4532a06d90c8639255a315689b257f0546c619
- SHA512 3c96d8d4c1da89327fc5578124aeca5d0e835b3b1429ee5faa269d216da3c429e2216797e5786950a0354fffd3c42b880f4775035923716b0cf83bd37424136a
- SSDEEP 1536:vVX4S3W9lAXcdekLsbQ3aQqW6/8FHFjx2bbrhdnZb/GRVJ5JqwVcl:vVoS3+l4Q3aTW6/8VF0bbrXZbcJqqY
- TLSH T16A43F60937E5DBA8E1BD9B7A0931A14003F6F927DB22D61E3ECE14DD1E72B008751663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-de
14 signatures
300 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260629-de
14 signatures
300 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 56KB
- SHA256 7608ada9b3a0520fc8d1ff8f0c46cdff7e2d691824447546767cfac1d827a904
- MD5 194b1cf3b3631fb1c1f2d58dd36ac5ff
- SHA1 bc4532a06d90c8639255a315689b257f0546c619
- SHA512 3c96d8d4c1da89327fc5578124aeca5d0e835b3b1429ee5faa269d216da3c429e2216797e5786950a0354fffd3c42b880f4775035923716b0cf83bd37424136a
- SSDEEP 1536:vVX4S3W9lAXcdekLsbQ3aQqW6/8FHFjx2bbrhdnZb/GRVJ5JqwVcl:vVoS3+l4Q3aTW6/8VF0bbrXZbcJqqY
- TLSH T16A43F60937E5DBA8E1BD9B7A0931A14003F6F927DB22D61E3ECE14DD1E72B008751663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4