snowlight | linux_i386

General

Target
linux_i386
Size 6KB
Sample261001-w63glavcre
SHA256 5307abb737f2a578602f15e35060d8e83cd9063417e745d1cc138bf421c1141f
MD5 0e7aff8379dc7f112dfece7d3cf1a668
SHA1 9abbb134f15ec47bf4de3825404d48b191d870fd
SHA512 0994e4867e207e5cdc435b2cc30f5603340f71da2600b84a3e2a1d8a4da660fe22685f54275213ebac1ac27c1ea7923df1bb54df33f0629b4723bc89a53089d1
SSDEEP 96:f6u6TiUBOUw3TJheuhiC5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbDJhA8Zz/cl+M2x/fLbpziQ
TLSH
T114E17217E2E2CD32D8D5137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 5307abb737f2a578602f15e35060d8e83cd9063417e745d1cc138bf421c1141f
MD5 0e7aff8379dc7f112dfece7d3cf1a668
SHA1 9abbb134f15ec47bf4de3825404d48b191d870fd
SHA512 0994e4867e207e5cdc435b2cc30f5603340f71da2600b84a3e2a1d8a4da660fe22685f54275213ebac1ac27c1ea7923df1bb54df33f0629b4723bc89a53089d1
SSDEEP 96:f6u6TiUBOUw3TJheuhiC5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbDJhA8Zz/cl+M2x/fLbpziQ
TLSH
T114E17217E2E2CD32D8D5137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86