General

  • Target
    linux_i386
  • Size 6KB
  • Sample261008-pg6pdsef87
  • SHA256 551f357efa683294a2913468e348faed6d99cb085f88b4d70cd042dc0121ab64
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • snowlight

C2
  • 101.33.45.136

Signatures

  • Family: SnowLight

    SnowLight is a loader attributed to China-nexus aka UNC5174.

  • Detects SNOWLIGHT Loader 1 IoCs

File Explorer

  • linux_i386
    .elf 6KB

linux_i386

  • SHA256 551f357efa683294a2913468e348faed6d99cb085f88b4d70cd042dc0121ab64
  • MD5 SHA1 SHA512 SSDEEP TLSH