snowlight | 3101a03f77da98c6ad853c50311cfa9a23be6ce264f5143b85484a9f1db07dd7[.]elf

General

Target
3101a03f77da98c6ad853c50311cfa9a23be6ce264f5143b85484a9f1db07dd7.elf
Size 7KB
Sample261110-e2lvlsgs5p
SHA256 3101a03f77da98c6ad853c50311cfa9a23be6ce264f5143b85484a9f1db07dd7
MD5 5d171b0ad7ccba96bcbd05f7a1daebbb
SHA1 482b4931a0017bce0ff3bf448f75d37af427b0b5
SHA512 7c6e59e82399a2fb37c5bc128e33853e23490400f9c49065a5fc34a0cafb435719c3f8031930bdd0ac8965bd0677e2667b994f1aa130150d8865814fd4ee8f54
SSDEEP 192:fsuqD7vccFB146nwz7cSym4S2ofahbpZiQ:fsue7ckJwFym4Sw/
TLSH
T197E15207E2D5CD72D8CD133846935749213AC86EAB83AF03650C59A9EE43BDC7A63752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 3101a03f77da98c6ad853c50311cfa9a23be6ce264f5143b85484a9f1db07dd7
MD5 5d171b0ad7ccba96bcbd05f7a1daebbb
SHA1 482b4931a0017bce0ff3bf448f75d37af427b0b5
SHA512 7c6e59e82399a2fb37c5bc128e33853e23490400f9c49065a5fc34a0cafb435719c3f8031930bdd0ac8965bd0677e2667b994f1aa130150d8865814fd4ee8f54
SSDEEP 192:fsuqD7vccFB146nwz7cSym4S2ofahbpZiQ:fsue7ckJwFym4Sw/
TLSH
T197E15207E2D5CD72D8CD133846935749213AC86EAB83AF03650C59A9EE43BDC7A63752
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86