dddcca97773fcadef1e9788266243a75923272d552944066418d9fa6292bf1c7

Sharing

Copy URL Twitter E-mail

General

Target
filelight-15.04.3-1.tar.xz
Size 307KB
Sample261002-g718lasdmf
SHA256 dddcca97773fcadef1e9788266243a75923272d552944066418d9fa6292bf1c7
MD5 9e7912613186b18509f27aae4a84e7d0
SHA1 84da7aa92cd2a0047e9374750c23d5322ae68fd7
SHA512 80c6e7c205d20e22e2bb4901f0847e9640cdc29b3489d3d001c4d406eddee0b5d332928d2833abc7974ffde580167ad0f3fb509fdb5f98e670194dc44a127d5d
SSDEEP 6144:IzhqMz5UTs1LJ+HYBRLTVWeR0hCYDhpLSTwvRy7VhkXxZi1jSy:gReTs1605TV4hhDht9EhkKGy
TLSH
T1BF64234669671CBE4BBE9F869D233102619323271C28F97103BC046E26DEF7D654DB36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  etc/postinstall/filelight.sh
- Size 229B
- SHA256 8ae49f2d8903002b4a6282893a32340e17f11eed058f0427b60a187e23297f0c
- MD5 3e0ddd89eff8d7d56705a2651c78d9e8
- SHA1 ffa63dcb359926fbe97c683d3b486121544f0c63
- SHA512 fea81fdc98fc3e062b29fc86e3545c576c7dd85e8d1de193b0ee9c86d01a98506483e5e3ba544a648b1df401d47550f00c003ff102e13974c6f8692e5f3a799b
- TLSH
  T1F1D0A711F519C0FACF331CBE2485990043C170AA0C52F940A4D49D10F6557AA350F00D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  usr/bin/filelight.exe
- Size 58KB
- SHA256 2a16cd7d5f08bb0a55ef4985ed5917ad3af8070ac1f63ddf0cdb30b22fa2d4b0
- MD5 e6a33240050bf45692f87cb0604b0d17
- SHA1 4d92df89040bffe6c24890fa136ccfa8cd93e120
- SHA512 b09f25956e642864adb7221b7b01ad7cef7487e8b6e1ca2e525181d2838c4423c4f61cdff752bde22e396bd878826e02f7da00ede050f294155d0d265bc74023
- SSDEEP 768:w9+dmoC4t9xH8NW7O/Fs2GdlyJ3aoooooooooYq1ZrXW24pQFMq4Yl/ObW8:w+dv1tLpaeyJBjrXW24pKM0l/ObW8
- TLSH
  T1A7432A627D8195F8FF3644754885D3FF97717902883A8D2AEE40BF0EAC721BA1817396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  usr/lib/qt5/plugins/filelightpart.dll
- Size 180KB
- SHA256 67f711e0999fe14afe58534da8f0b5e074a27b5e1985fbcdccc58e3a4975d168
- MD5 1433a9be84c48d9cfd8f5a7260664507
- SHA1 1c5901bb269327ccc59ca05735d7d7f117cbc5f2
- SHA512 47e083c2af7137f3ff875b8719fad7663246ef639ba4d3ac634ce74007068048327a4955a7ad66aaf73061370f32a7e2a8147eb9b464d172b77b98a199809490
- SSDEEP 3072:OxrmKM/z1c+laPMIFh9Bd947+bPMzyO8GAxsK4uKYW27I6uwtYAXEzSVvkf5:OxrmKM/z1c+lKD71rdxsDuKYW2iwtYAw
- TLSH
  T1E404C667FE4710F8ED1B0AB28549F37F5A302A01CB26CCAAFE55DB49E4723761016B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  usr/share/applications/org.kde.filelight.desktop
- Size 6KB
- SHA256 d93cb4cf7269942e1f6885d92d4c966436f292fae299e6a407f8854e18112f61
- MD5 2fba9f50e69513fc536b011e03090409
- SHA1 ac0cc93340d252ade5e651efe4aad80914a06510
- SHA512 c7af69e956e7957a91b0d3717ecfa6d0f72e2d1187acb8949ab8dea9ed65941cf6ffa9a8efecf18aa93331495480f92978be065983c832ddd05fc61a48d06e38
- SSDEEP 192:fLjIuzswO7AUNk41dh0juQ5H/UNVs8Icm+lDjuGHI:fFQAUCoh0iQJUHs8Icm+Jit
- TLSH
  T1CCE11E0C53F108FF594376477510EB21AB854A7E2E36B1E9C45893EB24D9EC083B7AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  usr/share/kservices5/filelightpart.desktop
- Size 1KB
- SHA256 023b8e0302bd90ec752c592f1a0b928004a93c60b4d2944783339ef41834d03f
- MD5 336071b111100d6269ca30936924f7ee
- SHA1 0e0667cc339eb4e04d07eed52fc8933eeb2d0865
- SHA512 a8b03f06c7714a0c04d64d75a089c6863a0be302755232dc23cbb72d669231aa8ab9597aba0ac7fb3d426379b4b9e94b5b141e168c2ff13fdabc263ba995c155
- TLSH
  T1D53123013E891C5D388D866B2854563807C57CBC9DCA3225F5A8C5BF40E2CAB087D99A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12 behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14