snowlight | 00073b735ce5801aebe65a018284cd954f5d5a527eb7fbf0eb672da0eda5e6ce[.]bin[.]elf

General

Target
00073b735ce5801aebe65a018284cd954f5d5a527eb7fbf0eb672da0eda5e6ce.bin.elf
Size 9KB
Sample260922-d2mapsxamb
SHA256 00073b735ce5801aebe65a018284cd954f5d5a527eb7fbf0eb672da0eda5e6ce
MD5 83c72b41e9fbdb7195d96b3921dc135a
SHA1 89f04189bd39ab08e335e1bc3ad3938b16da7ebf
SHA512 9bc13736673a528a815ea6db765f7b0591bac775d030408ae0e4e070b6695cc10c1c9ff3674b9bd79a0da7952834248529adab3e9aebe5576825b299c58640ba
SSDEEP 96:GjOTpJ4WHbHf53lTTej6TNJ9VNNddfs2oYJYoBSf7meaamBFBp8hBdZvZ4:G6z4WTHTTfTpV9dfs2So8f2Tr8h3
TLSH
T1DC125047A2D1CE7FC8E813384467122472BBD47ADFA29713050C64B66E923DC1E6DF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

00073b735ce5801aebe65a018284cd954f5d5a527eb7fbf0eb672da0eda5e6ce.bin.elf

.elf 9KB

SHA256 00073b735ce5801aebe65a018284cd954f5d5a527eb7fbf0eb672da0eda5e6ce
MD5 83c72b41e9fbdb7195d96b3921dc135a
SHA1 89f04189bd39ab08e335e1bc3ad3938b16da7ebf
SHA512 9bc13736673a528a815ea6db765f7b0591bac775d030408ae0e4e070b6695cc10c1c9ff3674b9bd79a0da7952834248529adab3e9aebe5576825b299c58640ba
SSDEEP 96:GjOTpJ4WHbHf53lTTej6TNJ9VNNddfs2oYJYoBSf7meaamBFBp8hBdZvZ4:G6z4WTHTTfTpV9dfs2So8f2Tr8h3
TLSH
T1DC125047A2D1CE7FC8E813384467122472BBD47ADFA29713050C64B66E923DC1E6DF8A
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64