SILENTLOOP Propose Change

According to CERT-UA, SILENTLOOP is a PowerShell-based component that coordinates command execution, automatic configuration updates, and discovery of the C2 address, with the main C2 address obtained from a Telegram channel. It supports fallback mechanisms for locating the C2 to maintain control if the primary channel changes. This tool operates as part of a broader attack toolset, enabling persistent management of compromised hosts and facilitating reconnaissance and lateral movement through the network.

References

There is no Yara-Signature yet.