[ALL_FAMILIES]

SilverFox

rat1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:
SilverFox
CATEGORY:
RAT
DESCRIPTION:
SilverFox is a sophisticated remote access trojan (RAT) that emerged in 2022, known for its advanced process injection techniques and anti-analysis capabilities. It uses process hollowing to inject malicious code into system processes like VSSV.exe and explorer.exe, employs ALPC (Advanced Local Procedure Call) for inter-process communication, and implements multiple persistence mechanisms including service creation and scheduled tasks.
ALIASES:
SilverFox RATValleyRAT
TAGS:
remote_accessprocess_injectionalpc_communicationservice_creationpersistenceanti_analysis

[MUTEX_SIGNATURES](1)

[MUTEX_01]
Global\IsUserAnAdmin
ANALYST: @adhikara13 DATE: 2025-07-30

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:
SilverFox
Void Arachne
FIRST_OBSERVED:
2022

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1
THREAT_ACTORS:2
ALIASES:2
TAGS:6
CATEGORY:RAT
Malware profile loaded successfully

EvilMutex Project v1.0.0

Open Source Threat Intelligence Database