General
- Target UXCryptor.exe
- Size 1.2MB
- Sample260804-q3adraytay
- SHA256 21513e467a030b609afb4ecf964aad7f763f3cd1f488084f744d9f0c8b47bb78
- MD5 88f105caf45816d9d50768fac8c401bb
- SHA1 5c7600cab369773d63a2a2530216899fa457b71b
- SHA512 249e5779dafc44e7b8207727d8f01f082d803ffc07cf48e7caf7a0e499b7ec489fc20094fad111779183ffc269c01f55dedd937c931996748e6f7e2fee275a56
- SSDEEP 24576:8eM/C3e4XG5sd+PjnEtoN16h/qNbYA80iVqlKHvAUC1IS:V2Ch6E6NE/I8A8PVqlKfC1I
- TLSH T13645231236A0D769E2FE5B350635680503FE2866D335CA4DBECF35C91BE7B808A61793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 1.2MB
- SHA256 21513e467a030b609afb4ecf964aad7f763f3cd1f488084f744d9f0c8b47bb78
- MD5 88f105caf45816d9d50768fac8c401bb
- SHA1 5c7600cab369773d63a2a2530216899fa457b71b
- SHA512 249e5779dafc44e7b8207727d8f01f082d803ffc07cf48e7caf7a0e499b7ec489fc20094fad111779183ffc269c01f55dedd937c931996748e6f7e2fee275a56
- SSDEEP 24576:8eM/C3e4XG5sd+PjnEtoN16h/qNbYA80iVqlKHvAUC1IS:V2Ch6E6NE/I8A8PVqlKfC1I
- TLSH T13645231236A0D769E2FE5B350635680503FE2866D335CA4DBECF35C91BE7B808A61793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4