snowlight | ac495c8fa0c6d582efa44659ed03059c81e22edbb3e8aed5994688787cc112c0[.]elf

General

Target
ac495c8fa0c6d582efa44659ed03059c81e22edbb3e8aed5994688787cc112c0.elf
Size 6KB
Sample261107-byl5esgw21
SHA256 ac495c8fa0c6d582efa44659ed03059c81e22edbb3e8aed5994688787cc112c0
MD5 42b3956772b4b71e8d254723011c3480
SHA1 a575ab137738a4631b89727894db590487d09fed
SHA512 57c0a7a811feb4a33e483f8c332f39756fcfeaedaa0d49d15a075863779183e7e8af0712dbbad78cd287b9851f465de1096d55b89962860ef14855cd8f76cb52
SSDEEP 96:f6u6TiUBOUw3PJheuhi55Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcb/JhAXZz/cl+M2x/fLbpziQ
TLSH
T1DDE18117E2E2CD32D8D0137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 ac495c8fa0c6d582efa44659ed03059c81e22edbb3e8aed5994688787cc112c0
MD5 42b3956772b4b71e8d254723011c3480
SHA1 a575ab137738a4631b89727894db590487d09fed
SHA512 57c0a7a811feb4a33e483f8c332f39756fcfeaedaa0d49d15a075863779183e7e8af0712dbbad78cd287b9851f465de1096d55b89962860ef14855cd8f76cb52
SSDEEP 96:f6u6TiUBOUw3PJheuhi55Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcb/JhAXZz/cl+M2x/fLbpziQ
TLSH
T1DDE18117E2E2CD32D8D0137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86