snowlight | b671c810f2d5360738d4c7b17786da7f23bd8ced5af94d8630c42bc1425bd437[.]elf

General

Target
b671c810f2d5360738d4c7b17786da7f23bd8ced5af94d8630c42bc1425bd437.elf
Size 6KB
Sample261110-fd1jjay1bs
SHA256 b671c810f2d5360738d4c7b17786da7f23bd8ced5af94d8630c42bc1425bd437
MD5 c2cb9d0f75335f3ee69696656c6eacc9
SHA1 cf271f72deac4f4962f51c44a9ec59c760530299
SHA512 a9158e9681115245eca3b875481ced3beed94bcad84de81d5f354daa7d2650a299a1decb4f5b4385bd678166f5d12bcd04c92ecf35ab97abea262032411ac914
SSDEEP 96:f6u6TiUBOUw35Jheuhiq5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbpJhAkZz/cl+M2x/fLbpziQ
TLSH
T192E17217E2E2CD32D8D4137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

C2

Family: SnowLight
SnowLight is a loader attributed to China-nexus aka UNC5174.
loader snowlight

Detects SNOWLIGHT Loader 1 IoCs

loader apt unc5174

resource	yara_rule
sample	family_snowlight

SHA256 b671c810f2d5360738d4c7b17786da7f23bd8ced5af94d8630c42bc1425bd437
MD5 c2cb9d0f75335f3ee69696656c6eacc9
SHA1 cf271f72deac4f4962f51c44a9ec59c760530299
SHA512 a9158e9681115245eca3b875481ced3beed94bcad84de81d5f354daa7d2650a299a1decb4f5b4385bd678166f5d12bcd04c92ecf35ab97abea262032411ac914
SSDEEP 96:f6u6TiUBOUw35Jheuhiq5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbpJhAkZz/cl+M2x/fLbpziQ
TLSH
T192E17217E2E2CD32D8D4137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86