Chrysalis Backdoor SHA256 Hash Detection

Lacey Cochrane@NullVectorX

•updated Feb 2, 2026•3•0•54

This rule detects the presence or execution of the Chrysalis Backdoor by matching known SHA256 hashes of its components. It monitors file and process events for these specific hashes.