Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256Signal 53/100
87c34f16f1a27a30b1faa4c0bc9a28ff73726d204e6852143f8e615ab1ee46c6
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: Cato CTRL™ Threat Research: Foxveil – New Malware Loader Abusing Cloudflare, Discord, and Netlify as Staging Infrastructure
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Malware Families2
Tags
Feed Intelligence Summary
1 report73% confidence
Cato Networks
Feb 11, 2026
Cato CTRL™ Threat Research: Foxveil – New Malware Loader Abusing Cloudflare, Discord, and Netlify as Staging Infrastructure
44 IOCs in report