⚠
SilverFox
rat1 mutex signatures
[BASIC_INFORMATION]
FAMILY_NAME:
SilverFox
CATEGORY:
RAT
DESCRIPTION:
SilverFox is a sophisticated remote access trojan (RAT) that emerged in 2022, known for its advanced process injection techniques and anti-analysis capabilities. It uses process hollowing to inject malicious code into system processes like VSSV.exe and explorer.exe, employs ALPC (Advanced Local Procedure Call) for inter-process communication, and implements multiple persistence mechanisms including service creation and scheduled tasks.
ALIASES:
SilverFox RATValleyRAT
TAGS:
remote_accessprocess_injectionalpc_communicationservice_creationpersistenceanti_analysis
[MUTEX_SIGNATURES](1)
[MUTEX_01]
Global\IsUserAnAdmin
ANALYST: @adhikara13 DATE: 2025-07-30
REFERENCES:
[QUICK_ACTIONS]
[THREAT_INTELLIGENCE]
ATTRIBUTION:
⚠SilverFox
⚠Void Arachne
FIRST_OBSERVED:
2022
[SIGMA_RULE]
[STATISTICS]
MUTEX_COUNT:1
THREAT_ACTORS:2
ALIASES:2
TAGS:6
CATEGORY:RAT
Malware profile loaded successfully