snowlight | 5db03fa6c20adbe7aeaf3f4b5b9dad67b4e792e78f9cab58e868df1c9f685583[.]elf

General

Target
5db03fa6c20adbe7aeaf3f4b5b9dad67b4e792e78f9cab58e868df1c9f685583.elf
Size 9KB
Sample261110-c5bspscd77
SHA256 5db03fa6c20adbe7aeaf3f4b5b9dad67b4e792e78f9cab58e868df1c9f685583
MD5 2d543f55c87c2e512174f533ff3f30b9
SHA1 ea3bae42af880cb7880ebada4a66a0ebdec08201
SHA512 938b3b98be58a7abc899ca8d9c9159815788a5ec4eef1de0ccbe7b38a42ccd51fd7476241a934d55c4b54e2bfec521a3dd2916e974cdbdf7e09c05863d5d8538
SSDEEP 96:GjOTpJ4WHbHf58lTTej6TNJ9VBNddfs2oYJYoBSf7meaamBFBp8hBdZvZ4:G6z4WTwTTfTpVJdfs2So8f2Tr8h3
TLSH
T19D126147A2D1CE7FC8E813384467122472BBD47ADFA29713050C64B66E923DC1E6DF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 5db03fa6c20adbe7aeaf3f4b5b9dad67b4e792e78f9cab58e868df1c9f685583
MD5 2d543f55c87c2e512174f533ff3f30b9
SHA1 ea3bae42af880cb7880ebada4a66a0ebdec08201
SHA512 938b3b98be58a7abc899ca8d9c9159815788a5ec4eef1de0ccbe7b38a42ccd51fd7476241a934d55c4b54e2bfec521a3dd2916e974cdbdf7e09c05863d5d8538
SSDEEP 96:GjOTpJ4WHbHf58lTTej6TNJ9VBNddfs2oYJYoBSf7meaamBFBp8hBdZvZ4:G6z4WTwTTfTpVJdfs2So8f2Tr8h3
TLSH
T19D126147A2D1CE7FC8E813384467122472BBD47ADFA29713050C64B66E923DC1E6DF8A
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64