snowlight | linux_i386

General

Target
linux_i386
Size 7KB
Sample261107-pfsfdabw5w
SHA256 c624be7d3eb64a7e069412c8403f0a279a36c7a5b27c03fba5d74b94871cc514
MD5 09fab44fe601d93d90d9cd727515fb5b
SHA1 4ce50db49db7fe82061f0f3ff57b042f23e3c2f5
SHA512 9c138f9c1d5e1af7047c11ed8d91f5ad32cdea03659cc6d5d323622f8c2f48892cb6176fef19936104f378f50dc9edc1de6328933a174a766310d8e3a19df313
SSDEEP 192:fsuqD7vccFU1468wz7cSym4S2ofahbpZiQ:fsue7c7JHFym4Sw/
TLSH
T1E4E15207E2D5CE72D8CD133846931749213AC86EAA83AF03650C1999EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 c624be7d3eb64a7e069412c8403f0a279a36c7a5b27c03fba5d74b94871cc514
MD5 09fab44fe601d93d90d9cd727515fb5b
SHA1 4ce50db49db7fe82061f0f3ff57b042f23e3c2f5
SHA512 9c138f9c1d5e1af7047c11ed8d91f5ad32cdea03659cc6d5d323622f8c2f48892cb6176fef19936104f378f50dc9edc1de6328933a174a766310d8e3a19df313
SSDEEP 192:fsuqD7vccFU1468wz7cSym4S2ofahbpZiQ:fsue7c7JHFym4Sw/
TLSH
T1E4E15207E2D5CE72D8CD133846931749213AC86EAA83AF03650C1999EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86