General
- Target UXCryptor.exe
- Size 117KB
- Sample260721-ap4gnsbz71
- SHA256 93838c78218349695fba288abe4fa6f074fdaceef439bcb2a747c1d5ec82146c
- MD5 366c01a90cf2c45970dca115e3355502
- SHA1 bf9b0c642767f31de47273fed2a83801db419cce
- SHA512 ec34498182a36a820dff2e5a0395b9613bcd2e445696adcb84d1d349aba2ed05e7d3cf73d6c25b5b3f293f767baee329d8a3eed6cff0c83c131b8a9094384b7d
- SSDEEP 3072:K9Jcal/K4Rg0/vbbhfrb55X2ydjY4mXy9zUdv00gVOnx/P/ZTKqY:Cgivbr5XfSEzwvqwx/Pgq
- TLSH T1ECC39E0177D28B24D3BE6B3B1967E65003B7A9068737CB1D7DCD65C91BA3A408B22793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 117KB
- SHA256 93838c78218349695fba288abe4fa6f074fdaceef439bcb2a747c1d5ec82146c
- MD5 366c01a90cf2c45970dca115e3355502
- SHA1 bf9b0c642767f31de47273fed2a83801db419cce
- SHA512 ec34498182a36a820dff2e5a0395b9613bcd2e445696adcb84d1d349aba2ed05e7d3cf73d6c25b5b3f293f767baee329d8a3eed6cff0c83c131b8a9094384b7d
- SSDEEP 3072:K9Jcal/K4Rg0/vbbhfrb55X2ydjY4mXy9zUdv00gVOnx/P/ZTKqY:Cgivbr5XfSEzwvqwx/Pgq
- TLSH T1ECC39E0177D28B24D3BE6B3B1967E65003B7A9068737CB1D7DCD65C91BA3A408B22793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
UAC bypass
Disables RegEdit via registry modification
Adds Run key to start application
Checks whether UAC is enabled
Drops desktop.ini file(s)
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4