General
- Target UXCryptor(1).exe
- Size 127KB
- Sample260908-xtbnsaxcqf
- SHA256 1b01bf2bc077850312b093ccd5f5f91552f24acfbd5c99776eb79fcb0d1e2364
- MD5 85570908c946c00bf3fc8e2d1f66f5c7
- SHA1 1495c89d6569d6a91aca00a535d23a906608a424
- SHA512 cd3cba11094d74b76d558d90e175c89637d1f371107ae03ab947d5d443cf7f2e85030490e19a44a9e1aafe9623a3639b275af267b50b430aa30b73560db29a19
- SSDEEP 3072:Z9JgACAFjxLbR0yAkbMWcGaKaWR2ymmF2RfaIChqY:pbTMHGau2ukaIGq
- TLSH T15BD36B4073E89764D5BC9B764967F20213FBF812CA33DA1D3ECD658A2BA3B108B51752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UXCryptor(1).exe
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target UXCryptor(1).exe
- Size 127KB
- SHA256 1b01bf2bc077850312b093ccd5f5f91552f24acfbd5c99776eb79fcb0d1e2364
- MD5 85570908c946c00bf3fc8e2d1f66f5c7
- SHA1 1495c89d6569d6a91aca00a535d23a906608a424
- SHA512 cd3cba11094d74b76d558d90e175c89637d1f371107ae03ab947d5d443cf7f2e85030490e19a44a9e1aafe9623a3639b275af267b50b430aa30b73560db29a19
- SSDEEP 3072:Z9JgACAFjxLbR0yAkbMWcGaKaWR2ymmF2RfaIChqY:pbTMHGau2ukaIGq
- TLSH T15BD36B4073E89764D5BC9B764967F20213FBF812CA33DA1D3ECD658A2BA3B108B51752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify Tools
1Modify Registry
4