General
- Target UXCryptor.exe
- Size 55KB
- Sample260704-wp8maae16l
- SHA256 8d4795c4c83ec4961b7f5e9ddcd4ea50015f0ac9a30b5d9274a83ea2d358a572
- MD5 f400b5cea74c61631534a7b50c5b4abc
- SHA1 2e400d202187c89f9300d8a31fa74075f0d4831b
- SHA512 9aa963d35e108ba8b76c721f8f1da906f2dea665b4f422c4ba277dbaec346c4f4582f410fa514e69cac26020562887ceaea2a45f26e0cc63564428f1d1431f65
- SSDEEP 1536:HVX4kBVuB4tOPw+SsDCYzKbbrXdnJbJGRVJ9gqwVcl:HVokBQBbDCgKbbr5JbSgqqY
- TLSH T14343E60A37E5CBA8E2BD9B760A31964103F6F916DB32C61E3ECD14CD2E66B108751763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 55KB
- SHA256 8d4795c4c83ec4961b7f5e9ddcd4ea50015f0ac9a30b5d9274a83ea2d358a572
- MD5 f400b5cea74c61631534a7b50c5b4abc
- SHA1 2e400d202187c89f9300d8a31fa74075f0d4831b
- SHA512 9aa963d35e108ba8b76c721f8f1da906f2dea665b4f422c4ba277dbaec346c4f4582f410fa514e69cac26020562887ceaea2a45f26e0cc63564428f1d1431f65
- SSDEEP 1536:HVX4kBVuB4tOPw+SsDCYzKbbrXdnJbJGRVJ9gqwVcl:HVokBQBbDCgKbbr5JbSgqqY
- TLSH T14343E60A37E5CBA8E2BD9B760A31964103F6F916DB32C61E3ECD14CD2E66B108751763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4