General
- Target Project Lightning Tool.rar
- Size 48.2MB
- Sample260810-e9z27sbk4s
- SHA256 eec8b6bb7695885a4897b64c756a9883e6203eddb9160e6a70edd344f2bb4086
- MD5 45e8a9c621a04259e5e02780c63e2ac0
- SHA1 d45641874889e42c8de53c4aabd01d34228f5384
- SHA512 c39dc1572bc8e2ce8115eece7124f0a50164207cb296899cc6fa30dfaff9438cc536f6d7e6315259fb827aff5dee02a7b407b209b040bf08e2afd46c9617cdae
- SSDEEP 1572864:IcEdyOKDnmYyJNibjQ/fRxfBMHoVvFhgm5pzC:/OKiYy3ivefCoVvFhRnO
- TLSH T10CB7336EC7932368B4CAFF83FC1EC748CA02B40718E59AAA79DE277741657B5401864F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ProjectLightningInstaller.exe
Resource
win11-20260513-en
23 signatures
300 seconds
Malware Config
Targets
-
- Target ProjectLightningInstaller.exe
- Size 48.8MB
- SHA256 3b62707c64fed70a5254e0f6963e07b8a2316ab529e9c52b3cb2262c13f4c39c
- MD5 bcdd6b37c04a053436e976a06fd68c30
- SHA1 7f9e4292d7274e31ca28d08a3b2adab29e985b89
- SHA512 d336c25e8d4486f88aaddd407cb9eff8aa6f48060b49b4627e42259a4f08caf8eddbc9b330ea6018c82666ed2b89229c296c41c192141cba31702a8cd9737340
- SSDEEP 786432:v0M37QLJ25jGubIf3a02HxIkgeGUlAHBdvFg2OT+6tVKo5BUY0OBqO8TDekk1Guk:YMHki02HxIkfGUuHbvnkKoEYJqjWGtBV
- TLSH T109B73333B286673EE07A5A7302B791669C3F6E64A41A8C1397F00818CF2E5713D7E657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2