snowlight | 3b11b084a847abd5f0b74fc4eef9da3220abf6ccf5538321e1f6f76f412d9bcf[.]elf

General

Target
3b11b084a847abd5f0b74fc4eef9da3220abf6ccf5538321e1f6f76f412d9bcf.elf
Size 6KB
Sample261110-e3s1bayzcx
SHA256 3b11b084a847abd5f0b74fc4eef9da3220abf6ccf5538321e1f6f76f412d9bcf
MD5 6a5cfd25a131001803e38c30124a9735
SHA1 e81d683e11334bca61d2af9d0127e3a052508805
SHA512 a7ef02ef711ff307a06428869c357ae1c03155afa4ca05c49b8ec26cdc7d7208b6adf07cbfae9645a59a7ee50324d36d279e9b98d32499298ead8ab7758affa8
SSDEEP 96:f6u6TiUBOUw3xJheuhilX5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbBJhArZz/cl+M2x/fLbpziQ
TLSH
T199E17117E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 3b11b084a847abd5f0b74fc4eef9da3220abf6ccf5538321e1f6f76f412d9bcf
MD5 6a5cfd25a131001803e38c30124a9735
SHA1 e81d683e11334bca61d2af9d0127e3a052508805
SHA512 a7ef02ef711ff307a06428869c357ae1c03155afa4ca05c49b8ec26cdc7d7208b6adf07cbfae9645a59a7ee50324d36d279e9b98d32499298ead8ab7758affa8
SSDEEP 96:f6u6TiUBOUw3xJheuhilX5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbBJhArZz/cl+M2x/fLbpziQ
TLSH
T199E17117E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86