Overview
overview
4Static
static
3etc/postin...ght.sh
windows10-2004-x64
3etc/postin...ght.sh
windows11-ltsc_2024-x64
3usr/bin/filelight.exe
windows10-2004-x64
1usr/bin/filelight.exe
windows11-ltsc_2024-x64
1usr/lib/qt...rt.dll
windows10-2004-x64
3usr/lib/qt...rt.dll
windows11-ltsc_2024-x64
3usr/share/...esktop
ubuntu-18.04-amd64
4usr/share/...esktop
debian-9-armhf
usr/share/...esktop
debian-9-mips
usr/share/...esktop
debian-9-mipsel
usr/share/...esktop
ubuntu-18.04-amd64
3usr/share/...esktop
debian-9-armhf
usr/share/...esktop
debian-9-mips
usr/share/...esktop
debian-9-mipsel
Analysis
- max time kernel
0s - max time network
130s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
02/10/2026, 06:27
Static task
static1
Behavioral task
behavioral1
Sample
etc/postinstall/filelight.sh
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
etc/postinstall/filelight.sh
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
usr/bin/filelight.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
usr/bin/filelight.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
usr/lib/qt5/plugins/filelightpart.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
usr/lib/qt5/plugins/filelightpart.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
usr/share/applications/org.kde.filelight.desktop
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral8
Sample
usr/share/applications/org.kde.filelight.desktop
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
usr/share/applications/org.kde.filelight.desktop
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
usr/share/applications/org.kde.filelight.desktop
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral11
Sample
usr/share/kservices5/filelightpart.desktop
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral12
Sample
usr/share/kservices5/filelightpart.desktop
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral13
Sample
usr/share/kservices5/filelightpart.desktop
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral14
Sample
usr/share/kservices5/filelightpart.desktop
Resource
debian9-mipsel-20260513-en
General
- Target usr/share/applications/org.kde.filelight.desktop
- Size 6KB
- Sample261002-g718lasdmf
- SHA256 d93cb4cf7269942e1f6885d92d4c966436f292fae299e6a407f8854e18112f61
- MD5 2fba9f50e69513fc536b011e03090409
- SHA1 ac0cc93340d252ade5e651efe4aad80914a06510
- SHA512 c7af69e956e7957a91b0d3717ecfa6d0f72e2d1187acb8949ab8dea9ed65941cf6ffa9a8efecf18aa93331495480f92978be065983c832ddd05fc61a48d06e38
- SSDEEP 192:fLjIuzswO7AUNk41dh0juQ5H/UNVs8Icm+lDjuGHI:fFQAUCoh0iQJUHs8Icm+Jit
- TLSH T1CCE11E0C53F108FF594376477510EB21AB854A7E2E36B1E9C45893EB24D9EC083B7AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself gmain 1494 gtk-launch -
description ioc Process File opened for reading /proc/filesystems gtk-launch