General
- Target UXCryptor.exe
- Size 143KB
- Sample260804-qmk6baxycs
- SHA256 95991a9843db900b207576c3475e82857fd5ff40af2207dba84d04ee3e3c0cae
- MD5 6c8f3bdc2b4b49fec93c8b3d20076a5e
- SHA1 166c6a9ebacfc14a3eb9f0903e037a3bdad69a28
- SHA512 2335a7bfe65d8893a4f6903582cf6840ae2e9538e4b554a476e15f2cf61bdac0d5bc659f0d721f5b9705bae2dc510b1114377d38ee473f09e6e42f50fada57fd
- SSDEEP 3072:Q9Jc4/Q1dz+E7bRIBXbGX2ydjY4mXy9zUdv00gVOnx/P/ZEMv8k8h5hn7pLb2uh9:L7bTXfSEzwvqwx/POfzhb7pLb2Kq
- TLSH T130E3AE0573948B24E7BEAB3A0567E65143FBA502C737CA1D7ECE19CD1BA3A408B12753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 143KB
- SHA256 95991a9843db900b207576c3475e82857fd5ff40af2207dba84d04ee3e3c0cae
- MD5 6c8f3bdc2b4b49fec93c8b3d20076a5e
- SHA1 166c6a9ebacfc14a3eb9f0903e037a3bdad69a28
- SHA512 2335a7bfe65d8893a4f6903582cf6840ae2e9538e4b554a476e15f2cf61bdac0d5bc659f0d721f5b9705bae2dc510b1114377d38ee473f09e6e42f50fada57fd
- SSDEEP 3072:Q9Jc4/Q1dz+E7bRIBXbGX2ydjY4mXy9zUdv00gVOnx/P/ZEMv8k8h5hn7pLb2uh9:L7bTXfSEzwvqwx/POfzhb7pLb2Kq
- TLSH T130E3AE0573948B24E7BEAB3A0567E65143FBA502C737CA1D7ECE19CD1BA3A408B12753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4