snowlight | linux_i386

General

Target
linux_i386
Size 7KB
Sample260922-pjptnaeb95
SHA256 6cfd02e23dcdc51b0a29ef84caa3409425887107fae3120837de5fa50e0e3356
MD5 dbc0fce4f7b470ced2c171ad6e6dc4cb
SHA1 6f3b0148afa563d14ff24476991da8f45784c2e6
SHA512 5c1b56f013c5320e1b4680ea57f9d5b0676b3614204e1076d412b8985471ff6e6fdf8f33bf02b0115af2eb82899aea94cde0876cc4e6f68fee8ab67f17903019
SSDEEP 192:fsuqD7vccFo146kwz7cSym4S2ofahbpZiQ:fsue7cbJfFym4Sw/
TLSH
T17BE15207E2D5CD72D8CD133846935749213AC86EAB83EF03650C59A9EE43BDC7A63752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 6cfd02e23dcdc51b0a29ef84caa3409425887107fae3120837de5fa50e0e3356
MD5 dbc0fce4f7b470ced2c171ad6e6dc4cb
SHA1 6f3b0148afa563d14ff24476991da8f45784c2e6
SHA512 5c1b56f013c5320e1b4680ea57f9d5b0676b3614204e1076d412b8985471ff6e6fdf8f33bf02b0115af2eb82899aea94cde0876cc4e6f68fee8ab67f17903019
SSDEEP 192:fsuqD7vccFo146kwz7cSym4S2ofahbpZiQ:fsue7cbJfFym4Sw/
TLSH
T17BE15207E2D5CD72D8CD133846935749213AC86EAB83EF03650C59A9EE43BDC7A63752
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86