IndicatorPublished 24 Jun 2026Updated 9 Jul 2026

Malicious SHA-256 file hash 01ba4719c80b… (OffSeq Mirage)

Source OffSeq Mirage · Featured honeypot telemetry (opens in a new tab)

Indicators of compromise

Hashes 1

OffSeq Mirage — observed 2026-06-24..2026-06-24, 22×

01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2,357 time(s) in attacker activity between 2026-06-24 and 2026-07-09. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in IR, IN, MX, JP, BR, TW, PK, TR. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Impact

There is no confirmed direct impact from this indicator alone. It represents observed attacker activity involving a malicious payload but does not correspond to a known vulnerability or exploit affecting specific software or systems. No known exploits in the wild or vendor advisories are linked to this hash.

Defensive guidance

No specific remediation or patch is applicable since this is an indicator of attacker activity rather than a vulnerability. Security teams should incorporate this SHA-256 hash into detection and monitoring tools such as EDR, antivirus, and threat intelligence feeds to identify potential malicious activity. No official fixes or vendor advisories are available.

Summary

OffSeq Mirage honeypot sensors detected the SHA-256 hash 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b 974 times in attacker activity between June 24 and July 1, 2026. The hash fingerprints a malicious payload involved in ingress tool transfer (T1105), such as a dropper or web shell. There is no evidence of a specific vulnerability being exploited or known active campaigns tied to this hash. No vendor advisories or patches are associated with this indicator. It functions as an indicator of compromise (IOC) for detection purposes.

References

mirage.offseq.com (opens in a new tab)

Community reviews

Loading reviews…

Indicators of compromise

Hashes 1

Description

AI analysisMachine-generated, updated 1 Jul 2026, 20:51 UTC

MITRE ATT&CK techniques1 from threat tags

Technical details

References

Community reviews

Related threats