snowlight | b94c00bdd31c218b0a254de0e6380f0d2591b89fb9645d7325d0e5d17f87f0f7[.]elf

General

Target
b94c00bdd31c218b0a254de0e6380f0d2591b89fb9645d7325d0e5d17f87f0f7.elf
Size 6KB
Sample261110-e2lvlsyyh1
SHA256 b94c00bdd31c218b0a254de0e6380f0d2591b89fb9645d7325d0e5d17f87f0f7
MD5 1f1f410a9bbfc84a114c0b09414d1ab7
SHA1 f4cffc06b7c00c5f6d192e5e4007f64c774b97b3
SHA512 322257c5b2d593fc5ffe9acf97476e7eef331799803fb11dbc2cfe97ede6dd13b36c7355000027c2ffa0a9617633c0826cea575b419575c9e643cb45ebaf8ad7
SSDEEP 96:f6u6TiUBOUw3jJheuhia15Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbzJhACZz/cl+M2x/fLbpziQ
TLSH
T17EE17117E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 b94c00bdd31c218b0a254de0e6380f0d2591b89fb9645d7325d0e5d17f87f0f7
MD5 1f1f410a9bbfc84a114c0b09414d1ab7
SHA1 f4cffc06b7c00c5f6d192e5e4007f64c774b97b3
SHA512 322257c5b2d593fc5ffe9acf97476e7eef331799803fb11dbc2cfe97ede6dd13b36c7355000027c2ffa0a9617633c0826cea575b419575c9e643cb45ebaf8ad7
SSDEEP 96:f6u6TiUBOUw3jJheuhia15Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbzJhACZz/cl+M2x/fLbpziQ
TLSH
T17EE17117E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86