General
- Target UXCryptor.exe
- Size 1.0MB
- Sample260808-n4p5gseq3s
- SHA256 ce2a3eef6e5994aa14737a68a0d3948b74386be7d1203e2ed4a5bef20b97bfe5
- MD5 2dadf8e0f06a39248d6bea875c3a7871
- SHA1 c1e6e5ec3e15cc78725b16e21af08fa4c15607aa
- SHA512 66ddcf4dfa652655a123788e135afba2a49ff4e661025aa9a959c5ae8300ceb7d422ca7500e0af5dc15e0ea39f38abaefa551050dbd0044cff6be389f728224c
- SSDEEP 24576:lJonKwoga1iaBdAfx5BiHkpmVRKW8K435zLpVH1oNFaKR:lwra1nBdAf7RmVR8j35zV4j
- TLSH T13A352305A3A00E99C23DB772455296E093BBA627C67BDE1C7EDE60CD36A7F414322353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 1.0MB
- SHA256 ce2a3eef6e5994aa14737a68a0d3948b74386be7d1203e2ed4a5bef20b97bfe5
- MD5 2dadf8e0f06a39248d6bea875c3a7871
- SHA1 c1e6e5ec3e15cc78725b16e21af08fa4c15607aa
- SHA512 66ddcf4dfa652655a123788e135afba2a49ff4e661025aa9a959c5ae8300ceb7d422ca7500e0af5dc15e0ea39f38abaefa551050dbd0044cff6be389f728224c
- SSDEEP 24576:lJonKwoga1iaBdAfx5BiHkpmVRKW8K435zLpVH1oNFaKR:lwra1nBdAf7RmVR8j35zV4j
- TLSH T13A352305A3A00E99C23DB772455296E093BBA627C67BDE1C7EDE60CD36A7F414322353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4