General
- Target UXCryptor.exe
- Size 955KB
- Sample260809-tnnvdat1ay
- SHA256 006bf2afe80ac82b2a164c60f7612652c29f65fd4c1ab08e273b4d1f19617b58
- MD5 5cf6d663f8a9155e153ba11615d07401
- SHA1 1f432864855bed5954e6de3ffa47d221376718ca
- SHA512 d527c573461485d78bff055fbbdfc59e5d1c021ffee999ac1f9257b026bd897999e9a610d88f9571275985e17a5131944cf0d7baed8ebcf0b5c557fe87836a1a
- SSDEEP 24576:V0H5nfs00gTabbZTa+f9b3owVJCzMMYsJRmX0y:V0HBfdBTaHYRYsJIE
- TLSH T100252305A3E5DA40EEBCA6319423F74193FF7526CB33C14E7D8E28895BD75018B2279A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
UXCryptor.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor.exe
- Size 955KB
- SHA256 006bf2afe80ac82b2a164c60f7612652c29f65fd4c1ab08e273b4d1f19617b58
- MD5 5cf6d663f8a9155e153ba11615d07401
- SHA1 1f432864855bed5954e6de3ffa47d221376718ca
- SHA512 d527c573461485d78bff055fbbdfc59e5d1c021ffee999ac1f9257b026bd897999e9a610d88f9571275985e17a5131944cf0d7baed8ebcf0b5c557fe87836a1a
- SSDEEP 24576:V0H5nfs00gTabbZTa+f9b3owVJCzMMYsJRmX0y:V0HBfdBTaHYRYsJIE
- TLSH T100252305A3E5DA40EEBCA6319423F74193FF7526CB33C14E7D8E28895BD75018B2279A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4