snowlight | 30cd9a7ab6c64811b2816d89b28627e70348c7eb2cb488571f70c242221cbd25[.]elf

General

Target
30cd9a7ab6c64811b2816d89b28627e70348c7eb2cb488571f70c242221cbd25.elf
Size 9KB
Sample260930-h17bpsxcla
SHA256 30cd9a7ab6c64811b2816d89b28627e70348c7eb2cb488571f70c242221cbd25
MD5 84e19545c4c9959105e20f33b4678b37
SHA1 8d92e44ecb98c878fb9d50c75c6be71f118f0037
SHA512 8b73ee9c761b263d007e41e2500cd055e5d157218c2e52ebbb1de671416320851e6c50bf84ecda6dbb77fc33dd6b0185d46027617ad71322d23287d2e6b2af93
SSDEEP 96:GqTVJWWGXzS6bH5ML09V1J9G8Ym7+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHMZMWT1YmqhrsnurfjTr8sbnsl
TLSH
T18C123047A2D0CE3FC8D953384467122472B794BEDF629713064815B53F427E81E6EB8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 30cd9a7ab6c64811b2816d89b28627e70348c7eb2cb488571f70c242221cbd25
MD5 84e19545c4c9959105e20f33b4678b37
SHA1 8d92e44ecb98c878fb9d50c75c6be71f118f0037
SHA512 8b73ee9c761b263d007e41e2500cd055e5d157218c2e52ebbb1de671416320851e6c50bf84ecda6dbb77fc33dd6b0185d46027617ad71322d23287d2e6b2af93
SSDEEP 96:GqTVJWWGXzS6bH5ML09V1J9G8Ym7+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHMZMWT1YmqhrsnurfjTr8sbnsl
TLSH
T18C123047A2D0CE3FC8D953384467122472B794BEDF629713064815B53F427E81E6EB8B
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64