snowlight | 4fac6b5ac4fa64cf89eb20d71cef09ec3bf0c22fd5112f7ceacc5aa344bbc668[.]bin[.]elf

General

Target
4fac6b5ac4fa64cf89eb20d71cef09ec3bf0c22fd5112f7ceacc5aa344bbc668.bin.elf
Size 6KB
Sample260922-j8mspsty8j
SHA256 4fac6b5ac4fa64cf89eb20d71cef09ec3bf0c22fd5112f7ceacc5aa344bbc668
MD5 1825f4579de86b7816a802e10cd59902
SHA1 5c0011083823b4981fba8a7def9685c872e7b83a
SHA512 713a5323bb79291ab6a6079c8274acd95656c03bf5a86f4abc9b95e89e659552b03fbb53c41d6d84e12aca85750d1a36f09df83e5fd41da1d93637a553d57b2b
SSDEEP 96:f6u6TiUBOUw3eJheuhi05Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbOJhAaZz/cl+M2x/fLbpziQ
TLSH
T135E16117E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

4fac6b5ac4fa64cf89eb20d71cef09ec3bf0c22fd5112f7ceacc5aa344bbc668.bin.elf

.elf 6KB

SHA256 4fac6b5ac4fa64cf89eb20d71cef09ec3bf0c22fd5112f7ceacc5aa344bbc668
MD5 1825f4579de86b7816a802e10cd59902
SHA1 5c0011083823b4981fba8a7def9685c872e7b83a
SHA512 713a5323bb79291ab6a6079c8274acd95656c03bf5a86f4abc9b95e89e659552b03fbb53c41d6d84e12aca85750d1a36f09df83e5fd41da1d93637a553d57b2b
SSDEEP 96:f6u6TiUBOUw3eJheuhi05Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbOJhAaZz/cl+M2x/fLbpziQ
TLSH
T135E16117E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86