snowlight | linux_i386

General

Target
linux_i386
Size 7KB
Sample261107-plergaysgy
SHA256 53f5f1e3e60be2b34aa687e1f98348341354c4bf57ef237d5475ca4e2256061e
MD5 d70620a3ef49e67274b5ab71ea6be498
SHA1 d1a551dfe639e877341419e14f80104087b8a835
SHA512 afa98fdbcc9e3c28857212be7142202dee75a4599b51666943e0b3a989f514f8e8702f67205ab7ca02e78b4831f874dcac3929f05b395e766137db8f7150f5bc
SSDEEP 192:fsuqD7vccFg1465wz7cSym4S2ofahbpZiQ:fsue7cfJiFym4Sw/
TLSH
T159E16207E2D5CE72D8CD133846931749213AC86EAB83EF03650C19A9EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 53f5f1e3e60be2b34aa687e1f98348341354c4bf57ef237d5475ca4e2256061e
MD5 d70620a3ef49e67274b5ab71ea6be498
SHA1 d1a551dfe639e877341419e14f80104087b8a835
SHA512 afa98fdbcc9e3c28857212be7142202dee75a4599b51666943e0b3a989f514f8e8702f67205ab7ca02e78b4831f874dcac3929f05b395e766137db8f7150f5bc
SSDEEP 192:fsuqD7vccFg1465wz7cSym4S2ofahbpZiQ:fsue7cfJiFym4Sw/
TLSH
T159E16207E2D5CE72D8CD133846931749213AC86EAB83EF03650C19A9EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86