snowlight | 18cfccb9751fb3648acefeed528f1908bf54f349b140ad47994fc4c3fbd27813[.]elf

General

Target
18cfccb9751fb3648acefeed528f1908bf54f349b140ad47994fc4c3fbd27813.elf
Size 6KB
Sample261110-e8a2payzfv
SHA256 18cfccb9751fb3648acefeed528f1908bf54f349b140ad47994fc4c3fbd27813
MD5 5dc60fa1b3263596443ce466795825fd
SHA1 22a23522dce37b95bcd126efccd4174c70e27f1c
SHA512 942452447d85063e5b2dcf2c0ab25192bb2c9c325ea30254935b7cd70b38f293d7c22fb77532845a2a35e0ba94b02b7b96da0fa38135f038d483e334283f8ab8
SSDEEP 96:f6u6TiUBOUw38JheuhiO5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbMJhA4Zz/cl+M2x/fLbpziQ
TLSH
T194E17217E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 18cfccb9751fb3648acefeed528f1908bf54f349b140ad47994fc4c3fbd27813
MD5 5dc60fa1b3263596443ce466795825fd
SHA1 22a23522dce37b95bcd126efccd4174c70e27f1c
SHA512 942452447d85063e5b2dcf2c0ab25192bb2c9c325ea30254935b7cd70b38f293d7c22fb77532845a2a35e0ba94b02b7b96da0fa38135f038d483e334283f8ab8
SSDEEP 96:f6u6TiUBOUw38JheuhiO5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbMJhA4Zz/cl+M2x/fLbpziQ
TLSH
T194E17217E2E2CD32D8D4137E55930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86