snowlight | 96679534563c125293b229a3c6ad1082121c8c6151a90069522e1d1d0d069bb2[.]elf

General

Target
96679534563c125293b229a3c6ad1082121c8c6151a90069522e1d1d0d069bb2.elf
Size 7KB
Sample261110-e8a2payzfw
SHA256 96679534563c125293b229a3c6ad1082121c8c6151a90069522e1d1d0d069bb2
MD5 2a5afb05b2a83f0272d8bd20d984569f
SHA1 f54ae8e86cb737ba0d9759e867c4f7a4476df15c
SHA512 788cb3bf751ee0d02afac45a077017185d17a8e17d99ad3a4b89b6065a616c981f3886f809c7f3f9f1b80d42f0793371c97c0309d85bb0cd5a4ec9b61036d3fa
SSDEEP 192:fsuqD7vccFD146Ywz7cSym4S2ofahbpZiQ:fsue7c+JTFym4Sw/
TLSH
T18DE15207E2D5CE72D8CD133846935649213AC86EAA83AF03650C59A9EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 96679534563c125293b229a3c6ad1082121c8c6151a90069522e1d1d0d069bb2
MD5 2a5afb05b2a83f0272d8bd20d984569f
SHA1 f54ae8e86cb737ba0d9759e867c4f7a4476df15c
SHA512 788cb3bf751ee0d02afac45a077017185d17a8e17d99ad3a4b89b6065a616c981f3886f809c7f3f9f1b80d42f0793371c97c0309d85bb0cd5a4ec9b61036d3fa
SSDEEP 192:fsuqD7vccFD146Ywz7cSym4S2ofahbpZiQ:fsue7c+JTFym4Sw/
TLSH
T18DE15207E2D5CE72D8CD133846935649213AC86EAA83AF03650C59A9EE43BDC7A63652
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86