snowlight | d12ba0e7f1cf8e7149d6ff7227d53c60e415359d58fefca5fe77a605cf55e9fc

General

Target
d12ba0e7f1cf8e7149d6ff7227d53c60e415359d58fefca5fe77a605cf55e9fc
Size 6.8MB
Sample260817-ej7pcsek5v
SHA256 d12ba0e7f1cf8e7149d6ff7227d53c60e415359d58fefca5fe77a605cf55e9fc
MD5 139fe60cc044fa6e76b679bf9c3661f2
SHA1 22e57b7ca79c556dde326f65c2959b2f02b0c6de
SHA512 b62a5363625268f86498c35f962f0c3cd5ccfbae5ad4d7794ab255dba012deb617bec40e037ff595f51d07be72773e2ee894e88b9a483d4878297fc9ee9eadeb
SSDEEP 196608:vNt3uoYAdWwbxG8whwnx+0zAthmqazZ8hkNwv9v:vfuoxWwVGjhwxsto/Ovl
TLSH
T1C6663363C12035EFD81C464279BA5BEE0726D3C583F34A946668D464ADA37EC43FFA84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snowlight

C2

82.157.181.81

Targets

- Target
  9088
- Size 9KB
- SHA256 cd83d68b94603910aa535152fdf4c336c014029798d4b78b4183a864352b737e
- MD5 be2c552ae6a6e67058208959d7035db1
- SHA1 7dbab033adefa168d323dd4785a2a1f5a19d0d16
- SHA512 64fcf866798d0c35968f58d86818da35657380f0fc8fc08dd612e1a60558d433570f6aa11108cbf9aa773186cfe59a20f1348feb0e43781b98d098cfe7f7bf31
- SSDEEP 96:GqTVJWWGXzS6uH5ML09V1J9G8Ym6k+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHJZMWT1YmmhrsnurfjTr8sbnsl
- TLSH
  T14F122F47A2D0CE3FC8D953384467122472B794BADF629713064915B53F427E81E6EB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  f64
- Size 5.2MB
- SHA256 7f2a610efbb36dd84edcc01b0684475d060c048c1e7d949c16663e7f232db35d
- MD5 ec9a4a9883576a9451c1949ec631bcfa
- SHA1 275eb906354a6943523cf48c08a89085ffcb1bf1
- SHA512 0f0d024d0ebeaf348da5a426ff3bc64740c97a513555c6796c4c0073465aaa5a182adcd8e810d6f04368c4c5c1dc961e42fa54198394f5c2432b6d07c1dca991
- SSDEEP 98304:Zfljp2w5Qw1V4KG0eUDDiWoYHcIUGKjT94Hy2k+2VlaBn:ZfljALMV4KsQRFHexE6Un
- TLSH
  T13E4633F55737C93335F8A3BD731207D6A3D56661C0CF67249BAC2A276B3B6941A8080B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  java8
- Size 4.6MB
- SHA256 b77dd4b6be01f4226f35b2b2fce6850629f82f00e106c63466dc7e6390241b50
- MD5 d5283b6cf4d247a7c8ef9d53e3441c1f
- SHA1 8c36cd8efd722d03bf60a03e0cde2837f1190b92
- SHA512 b08017348812584bd752d510da9731889f71e74bf7b1a7e0320714e0ff6cf957fbf0a5e10edb7ec4375e34c250c93fb3e189a75da6ac38cec8432180e3fdcc6b
- SSDEEP 49152:N9wCQaqpHwsROjbZ69Yb3tfEHrjwylAt3z0Kzx4MRFce40f3ZwJzPxJ+wMBs5byI:bk5HwC+bZ69YDts6cPpR
- TLSH
  T1C6264C16FC9605EAC5BFE1308A865311BA7038A9873177E36F90A67A2636FD47D3D304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  tttt
- Size 9KB
- SHA256 eeb09c9b2f1db6b6529189111aba9f2fcd3cff9dc1caeda65b6f32b4c482d21b
- MD5 135aea8abf1c5e5885951cebeeee1f59
- SHA1 9bf726a8f2a3e4b8291063d129e3ff25944fb87d
- SHA512 0f2cd914322c33be0ce66ae3d16f74be2b14bff13ff8e1f61753e4640bc26a67ef0f04e584196a745073547e4d66fb60bf409376fb1ca9812abfc692930e2e7f
- SSDEEP 96:GqTVJWWGXzS6WH5ML09V1J9G8Ym6k+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHJZMWT1YmmhrsnurfjTr8sbnsl
- TLSH
  T1AD122F47A2D0CE3FC8D953384467122472B794BADF629713064915B53F427E81E6EB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4