← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - Silver Fox Targeting India Using Tax Themed Phishing Lures
WHITE Silver Fox celestre 2025-12-29 Modified: 2026-01-23
24
IOCs
MEDIUM VOLUME
phishingindiavalley ratdll hijackingtax-themedmulti-stage attackaptc2 communicationchinese threat actor
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Valley RAT
Indicators of Compromise (24)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 d33f351a4aeea5e608853d1a56661059 — 2025-12-29
FileHash-MD5 d58a07f94a1a16b68321d78b838bec0f — 2025-12-29
FileHash-SHA1 b1b99c68089af56cc7ae7040ffe89be1359dbb36 — 2025-12-29
FileHash-SHA256 068e49e734c2c7be4fb3f01a40bb8beb2d5f4677872fabbced7741245a7ea97c — 2025-12-29
FileHash-SHA256 77ea62ff74a66f61a511eb6b6edac20be9822fa9cc1e7354a8cd6379c7b9d2d2 — 2025-12-29
FileHash-SHA256 f74017b406e993bea5212615febe23198b09ecd73ab79411a9f6571ba1f94cfa — 2025-12-29
FileHash-SHA256 fa388a6cdd28ad5dd83acd674483828251f21cbefaa801e839ba39af24a6ac19 — 2025-12-29
domain 2025swmm.cn — 2025-12-29
domain dingtalki.cn — 2025-12-29
domain ggwk.cc — 2025-12-29
domain gov-a.club — 2025-12-29
domain gov-a.fit — 2025-12-29
domain gov-a.work — 2025-12-29
domain gov-c.club — 2025-12-29
domain govk.club — 2025-12-29
domain gvo-b.club — 2025-12-29
domain hhiioo.cn — 2025-12-29
domain hhiioo.work — 2025-12-29
domain hhimm.work — 2025-12-29
domain itdd.club — 2025-12-29
domain kkyui.club — 2025-12-29
domain swjc2025bjkb.cn — 2025-12-29
domain xzghjec.com — 2025-12-29
hostname b.yuxuanow.top — 2025-12-29
References (1)
↗ https://www.cloudsek.com/blog/silver-fox-targeting-india-using-tax-themed-phishing-lures