snowlight | 83796f80091434bc293f02438d51437858f2fbc813c4f1e6d0571b37d720daf6[.]elf

General

Target
83796f80091434bc293f02438d51437858f2fbc813c4f1e6d0571b37d720daf6.elf
Size 7KB
Sample261110-d1ffrscf77
SHA256 83796f80091434bc293f02438d51437858f2fbc813c4f1e6d0571b37d720daf6
MD5 45adfab9fdf97f8969ccffa86d21f043
SHA1 4473a0e8fae680dd95a091d267f129bb0a927254
SHA512 3d6bbaec000c1f601e4605e7c12305d1481e38c73b81d0895520e98dd74dcd5408bbc0c3218a6eb60fc24209fafb25e9dd6d4ccca3764ded00ffd245557d25a7
SSDEEP 192:fsuqD7vccF9146Fwz7cSym4S2ofahbpZiQ:fsue7c8JeFym4Sw/
TLSH
T12AE15207E2D5CD72D8CD133846935749213AC86EAB83AF03650C5999EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 83796f80091434bc293f02438d51437858f2fbc813c4f1e6d0571b37d720daf6
MD5 45adfab9fdf97f8969ccffa86d21f043
SHA1 4473a0e8fae680dd95a091d267f129bb0a927254
SHA512 3d6bbaec000c1f601e4605e7c12305d1481e38c73b81d0895520e98dd74dcd5408bbc0c3218a6eb60fc24209fafb25e9dd6d4ccca3764ded00ffd245557d25a7
SSDEEP 192:fsuqD7vccF9146Fwz7cSym4S2ofahbpZiQ:fsue7c8JeFym4Sw/
TLSH
T12AE15207E2D5CD72D8CD133846935749213AC86EAB83AF03650C5999EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86