SilverFox Known Payload Samples via SHA256 Hash Match

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•3

This rule detects the presence of specific SilverFox malware payload files by matching their SHA256 hashes against known indicators of compromise. This identification is typically used for file integrity monitoring, endpoint scanning, or gateway-based file filtering to prevent malicious code execution.