snowlight | 86b9ddeb528f6f6452d5b6eb209055f6c0378b5a2c2217e257209395e1d3a09a[.]elf

General

Target
86b9ddeb528f6f6452d5b6eb209055f6c0378b5a2c2217e257209395e1d3a09a.elf
Size 6KB
Sample260914-c8aptafq4y
SHA256 86b9ddeb528f6f6452d5b6eb209055f6c0378b5a2c2217e257209395e1d3a09a
MD5 8959ece56fb657fe76c8060a287d483e
SHA1 3db6a639ffaf72a70d2c2f46356709682dcd80af
SHA512 ca0159312af759d990da28fa9850fb92e940768bcb08978235dee9321201df285ccc4b69d262de9b52e3b217197dc879b4b44fd45bfe47dc0e5814a7336c0f25
SSDEEP 96:f6u6TiUBOUw38Jheuhi/5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbMJhARZz/cl+M2x/fLbpziQ
TLSH
T194E17117E2E2CD32D8D4137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 86b9ddeb528f6f6452d5b6eb209055f6c0378b5a2c2217e257209395e1d3a09a
MD5 8959ece56fb657fe76c8060a287d483e
SHA1 3db6a639ffaf72a70d2c2f46356709682dcd80af
SHA512 ca0159312af759d990da28fa9850fb92e940768bcb08978235dee9321201df285ccc4b69d262de9b52e3b217197dc879b4b44fd45bfe47dc0e5814a7336c0f25
SSDEEP 96:f6u6TiUBOUw38Jheuhi/5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbMJhARZz/cl+M2x/fLbpziQ
TLSH
T194E17117E2E2CD32D8D4137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86