General
- Target Light it Up!.exe
- Size 397KB
- Sample260710-mg764saw6s
- SHA256 08913a88adfc0396ba976b7dfc3411ed04be614c42233c2c9c6a1b0986b26607
- MD5 741e9c25220f13e8091734e4f9f71846
- SHA1 c0475b43c204a6db497ebd8caaa96d97a020eb10
- SHA512 0490c6c60b22b9c17e4b22caed5211d81e79209d9dce174e68cbb41e7741118a1798879bc12e336c476aa79ee433dde039ed8d4e9bc29d18295a434a55d9b656
- SSDEEP 6144:5GLhBBod5RV4e4gQ1oqMZHuAx9mynJFq2i3YkWQ2VpX7lkW6aOj9l80AkIrWxlfr:8O5Aa6ynX7lkW6XWkIW3z
- TLSH T110846B2AD69629A9F237813CCDFB0651E9727C0C03A189DB13A6A6FC0D57EEC9735701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Light it Up!.exe
Resource
win11-20260513-en
Malware Config
Targets
-
- Target Light it Up!.exe
- Size 397KB
- SHA256 08913a88adfc0396ba976b7dfc3411ed04be614c42233c2c9c6a1b0986b26607
- MD5 741e9c25220f13e8091734e4f9f71846
- SHA1 c0475b43c204a6db497ebd8caaa96d97a020eb10
- SHA512 0490c6c60b22b9c17e4b22caed5211d81e79209d9dce174e68cbb41e7741118a1798879bc12e336c476aa79ee433dde039ed8d4e9bc29d18295a434a55d9b656
- SSDEEP 6144:5GLhBBod5RV4e4gQ1oqMZHuAx9mynJFq2i3YkWQ2VpX7lkW6aOj9l80AkIrWxlfr:8O5Aa6ynX7lkW6XWkIW3z
- TLSH T110846B2AD69629A9F237813CCDFB0651E9727C0C03A189DB13A6A6FC0D57EEC9735701
- MD5 SHA1 SHA512 SSDEEP TLSH
UAC bypass
Disables RegEdit via registry modification
Disables Task Manager via registry modification
Modifies Windows Firewall
Disables service(s)
Drops startup file
Stops running service(s)
Adds Run key to start application
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
2Service Execution
2Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
3Windows Service
3Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
3Windows Service
3Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify System Firewall
1Disable or Modify Tools
1Modify Registry
3Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1