snowlight | linux_i386

General

Target
linux_i386
Size 7KB
Sample260930-aqlcgsxvht
SHA256 193a52c3754aede851fc282f415b9b818ef2e01a136a925c2464865ec98e644d
MD5 edbf771bb30e6207ae0c5d917cde0cbf
SHA1 3775445a4573872456272003315f4108263a01d7
SHA512 1accba524c01777fc0cc6c6d278cb1ccb7ee15c3ccd79901603372d3914f1733b85e147448c229d618504dc146be5ec4e088aeb070b3533586cfeac260dd7132
SSDEEP 192:fsuqD7vccFg146vwz7cSym4S2ofahbpZiQ:fsue7cfJoFym4Sw/
TLSH
T1B5E16207E2D5CD72D8CD133846931749213AC86EAB83AF03650C19A9EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 193a52c3754aede851fc282f415b9b818ef2e01a136a925c2464865ec98e644d
MD5 edbf771bb30e6207ae0c5d917cde0cbf
SHA1 3775445a4573872456272003315f4108263a01d7
SHA512 1accba524c01777fc0cc6c6d278cb1ccb7ee15c3ccd79901603372d3914f1733b85e147448c229d618504dc146be5ec4e088aeb070b3533586cfeac260dd7132
SSDEEP 192:fsuqD7vccFg146vwz7cSym4S2ofahbpZiQ:fsue7cfJoFym4Sw/
TLSH
T1B5E16207E2D5CD72D8CD133846931749213AC86EAB83AF03650C19A9EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86