snowlight | b60ce85101c04d84967818312791943cc7bfd9883931e0aa41b6d2c0205fa4c5[.]elf

General

Target
b60ce85101c04d84967818312791943cc7bfd9883931e0aa41b6d2c0205fa4c5.elf
Size 9KB
Sample261110-e3s1batw4r
SHA256 b60ce85101c04d84967818312791943cc7bfd9883931e0aa41b6d2c0205fa4c5
MD5 5c9afe880cbef92326ab1ba2d809a17e
SHA1 8bee699fb985a6705ab7ed91c2c0e4d2c6b1de75
SHA512 fc0951c3d10e005b7f4e12b79c2b668f27a3aee892ed09e65aeb982e7ded986884cec680082a47c040c773b7eb099aae22593376158ce43f15086d98cfa837a9
SSDEEP 96:GqTVJWWGXzS6WH5ML09V1J9G8YmS+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHJZMWT1YmfhrsnurfjTr8sbnsl
TLSH
T105123047A2D0CE3FC8D953384467122472B794BEDF629713064915B63F427E81E6EB8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 b60ce85101c04d84967818312791943cc7bfd9883931e0aa41b6d2c0205fa4c5
MD5 5c9afe880cbef92326ab1ba2d809a17e
SHA1 8bee699fb985a6705ab7ed91c2c0e4d2c6b1de75
SHA512 fc0951c3d10e005b7f4e12b79c2b668f27a3aee892ed09e65aeb982e7ded986884cec680082a47c040c773b7eb099aae22593376158ce43f15086d98cfa837a9
SSDEEP 96:GqTVJWWGXzS6WH5ML09V1J9G8YmS+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHJZMWT1YmfhrsnurfjTr8sbnsl
TLSH
T105123047A2D0CE3FC8D953384467122472B794BEDF629713064915B63F427E81E6EB8B
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64