Index

d138a416cb7844173677eb4ec9e318edf3997c547137cb5d2144364183e18b29.elf Sep 30

d138a416cb7844173677eb4ec9e318edf3997c547137cb5d2144364183e18b29 ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, killswitch

d285e850768951f5837339bbcbba1ed22d41f8e9a42ab9c2ad7cd31c03fcdf5b.elf Sep 30

d285e850768951f5837339bbcbba1ed22d41f8e9a42ab9c2ad7cd31c03fcdf5b ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, hardcoded IP

30cd9a7ab6c64811b2816d89b28627e70348c7eb2cb488571f70c242221cbd25.elf Sep 30

30cd9a7ab6c64811b2816d89b28627e70348c7eb2cb488571f70c242221cbd25 ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, killswitch

fe32a25cfedbbe4f1f96f5bd08351bc36f5366dd943300bd1b7190da5d3331c8.elf Sep 24

fe32a25cfedbbe4f1f96f5bd08351bc36f5366dd943300bd1b7190da5d3331c8 ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, killswitch

7dd3bc33ca08a9307657ffe327761af370400e00b4531fe0f497ec879ec735bf.elf Sep 20

7dd3bc33ca08a9307657ffe327761af370400e00b4531fe0f497ec879ec735bf ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT malware indicators present

7875d573ef014091135caa1f194cd5cf2fda027fe99ae51a51674845d059576d.elf Sep 20

7875d573ef014091135caa1f194cd5cf2fda027fe99ae51a51674845d059576d ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, hardcoded IP

3260d5dd17bfb3258ad8a7f0b45a45f7704b1572f8710d91b9a503ea7fdc94a0.elf Sep 20

3260d5dd17bfb3258ad8a7f0b45a45f7704b1572f8710d91b9a503ea7fdc94a0 ✓ O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, killswitch

23ace1bfcff4ab792eb612ac2b370866dc1ebf26aac7b8959daa0c8fb7f1ed42.elf May 14

23ace1bfcff4ab792eb612ac2b370866dc1ebf26aac7b8959daa0c8fb7f1ed42 O₂(AlEr₃)H₄(FCm₈OsPo)Md₂(BkHe)Th₂

100% SNOWLIGHT C2, evasion, hardcoded IP