snowlight | 9e67972bae2e7d1d7ae2af89d5ff41105f9c90235d648b6aec1db2cb8968d901[.]elf

General

Target
9e67972bae2e7d1d7ae2af89d5ff41105f9c90235d648b6aec1db2cb8968d901.elf
Size 9KB
Sample261109-e3qvysht8m
SHA256 9e67972bae2e7d1d7ae2af89d5ff41105f9c90235d648b6aec1db2cb8968d901
MD5 7a1d78ed33aa06e9610c64714e62a4aa
SHA1 387de169b1d8874289238a8e3a0632dc56be65ab
SHA512 80cb2fa8f0033b10f04b92c201e9f93398210f8fc36fab86ffd60dbbae042c1e0c73ec4a8fe47062ef70114c2508bd7bdc54d45a8c4274b6c414319352acd888
SSDEEP 96:GjOTpJ4WHbHf54lTTej6TNJ9VJZNddfs2oYJYoBSf7meaamBFBp8hBdZvZ4:G6z4WToTTfTpV7dfs2So8f2Tr8h3
TLSH
T11D125147A2D1CE7FC8E813384467122472BBD47ADFA29713050C65766E923DC1E6DF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 9e67972bae2e7d1d7ae2af89d5ff41105f9c90235d648b6aec1db2cb8968d901
MD5 7a1d78ed33aa06e9610c64714e62a4aa
SHA1 387de169b1d8874289238a8e3a0632dc56be65ab
SHA512 80cb2fa8f0033b10f04b92c201e9f93398210f8fc36fab86ffd60dbbae042c1e0c73ec4a8fe47062ef70114c2508bd7bdc54d45a8c4274b6c414319352acd888
SSDEEP 96:GjOTpJ4WHbHf54lTTej6TNJ9VJZNddfs2oYJYoBSf7meaamBFBp8hBdZvZ4:G6z4WToTTfTpV7dfs2So8f2Tr8h3
TLSH
T11D125147A2D1CE7FC8E813384467122472BBD47ADFA29713050C65766E923DC1E6DF8A
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64