General
- Target UXCryptor.exe
- Size 123KB
- Sample260803-nsm6rawdrg
- SHA256 1203e7e206b98b644e0220c6c4947ec885af21a5f640c45450cdd7054a3c7fed
- MD5 d8ba9032e823eeb8462738cea9badee1
- SHA1 0addd886d78de24f81f4de5693b7a8dc54d322ff
- SHA512 557e37f2639618312f42633d0ea17f55b42c36dffbab68ce7ccfdb4fe95a9865e9dc58395f3b41b530aff843b8a05c0e8ce6a455464304180292e67ebc14b951
- SSDEEP 3072:2o29Z2msfbuY8w09R1DNpHh7AaYPPRsnL9CbRNsybkX2ydjY4mXy9zUdv00gVOny:o7Cb2XfSEzwvqwx/PSq
- TLSH T164C38C0537908B20D2BEAB7B5663A65107FAA852C737DA0D3ECE18CD1BA3F419712753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 123KB
- SHA256 1203e7e206b98b644e0220c6c4947ec885af21a5f640c45450cdd7054a3c7fed
- MD5 d8ba9032e823eeb8462738cea9badee1
- SHA1 0addd886d78de24f81f4de5693b7a8dc54d322ff
- SHA512 557e37f2639618312f42633d0ea17f55b42c36dffbab68ce7ccfdb4fe95a9865e9dc58395f3b41b530aff843b8a05c0e8ce6a455464304180292e67ebc14b951
- SSDEEP 3072:2o29Z2msfbuY8w09R1DNpHh7AaYPPRsnL9CbRNsybkX2ydjY4mXy9zUdv00gVOny:o7Cb2XfSEzwvqwx/PSq
- TLSH T164C38C0537908B20D2BEAB7B5663A65107FAA852C737DA0D3ECE18CD1BA3F419712753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4