Malware
SNOWLIGHT
According to sysdig, SNOWLIGHT is used as a dropper for its fileless payload (vshell).
SNOWLIGHT is a Linux malware family operated by UNC5174.
Background
Per sysdig, SNOWLIGHT serves as a dropper that delivers its fileless payload, vshell.
Source: Malpedia (Fraunhofer FKIE).