• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Known SilverFox trojan payload SHA256 hash match

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated Sep 18, 2026•0•0•6

    Detects known malicious SilverFox trojan payloads by matching their SHA256 file hashes. This rule operates on file hashing metadata to identify specific binary artifacts associated with the SilverFox threat actor, regardless of the delivery mechanism or download source.

    YARA

    Tags

    T1204.002 - Malicious FileTA0002 - ExecutionFile Executable DetectedMalware DetectedWindowsWindows Sysmon

    Found in

    • SilverFox Evolves Delivery Mechanisms via Cloud Blacklist LogicLast updated Sep 14, 2026
    • SilverFox Evolves Delivery Mechanisms via Cloud Blacklist LogicLast updated Sep 14, 2026
    • SilverFox Evolves Delivery Mechanisms via Cloud Blacklist LogicLast updated Sep 14, 2026
    • SilverFox Evolves Delivery Mechanisms via Cloud Blacklist LogicLast updated Sep 14, 2026
    • SilverFox Evolves Delivery Mechanisms via Cloud Blacklist LogicLast updated Sep 14, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?