MALWARE FAMILY

Silence

Internal ID: win.silence

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to PCrisk, Truebot, also known as Silence.Downloader, is a malicious program that has botnet and loader/injector capabilities. This malware can add victims' devices to a botnet and cause chain system infections (i.e., download/install additional malicious programs/components).

There is significant variation in Truebot's infection chains and distribution. It is likely that the attackers using this malicious software will continue to make such changes.

Threat Analysis

Silence is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→http://www.intezer.com/silenceofthemoles/

→http://www.microsoft.com/en-us/security/blog/2022/10/27/raspberry-robin-worm-part-of-larger-ecosystem-facilitating-pre-ransomware-activity/

→https://blog.talosintelligence.com/breaking-the-silence-recent-truebot-activity/

→https://blogs.vmware.com/security/2023/06/carbon-blacks-truebot-detection.html

→https://github.com/Tera0017/TAFOF-Unpacker

→https://malware.love/malware_analysis/reverse_engineering/2023/02/12/analyzing-truebot-packer.html

→https://malware.love/malware_analysis/reverse_engineering/2023/02/18/analyzing-truebot-static-unpacking.html

→https://malware.love/malware_analysis/reverse_engineering/2023/03/31/analyzing-truebot-capabilities.html

→https://malware.love/malware_analysis/reverse_engineering/config_extraction/2023/07/13/truebot-config-extractor.html

→https://norfolkinfosec.com/how-the-silence-downloader-has-evolved-over-time/

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.silence

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Silence