Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

Malicious SHA-256 file hash 01ba4719c80b… (OffSeq Mirage)

0
Low
Published: 06/24/2026 (06/24/2026, 03:16:13 UTC)
Source: OffSeq Mirage★ Featured

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2,357 time(s) in attacker activity between 2026-06-24 and 2026-07-09. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in IR, IN, MX, JP, BR, TW, PK, TR. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/01/2026, 20:51:26 UTC

Technical Analysis

OffSeq Mirage honeypot sensors detected the SHA-256 hash 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b 974 times in attacker activity between June 24 and July 1, 2026. The hash fingerprints a malicious payload involved in ingress tool transfer (T1105), such as a dropper or web shell. There is no evidence of a specific vulnerability being exploited or known active campaigns tied to this hash. No vendor advisories or patches are associated with this indicator. It functions as an indicator of compromise (IOC) for detection purposes.

Potential Impact

There is no confirmed direct impact from this indicator alone. It represents observed attacker activity involving a malicious payload but does not correspond to a known vulnerability or exploit affecting specific software or systems. No known exploits in the wild or vendor advisories are linked to this hash.

Defensive Guidance

No specific remediation or patch is applicable since this is an indicator of attacker activity rather than a vulnerability. Security teams should incorporate this SHA-256 hash into detection and monitoring tools such as EDR, antivirus, and threat intelligence feeds to identify potential malicious activity. No official fixes or vendor advisories are available.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Severity Source
AI-assessed (no CVSS data)

Indicators of Compromise

Hash

ValueDescriptionCopy
hash01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
OffSeq Mirage — observed 2026-06-24..2026-06-24, 22×

Threat ID: 6a3c202b748d17fc4febe8b9

Added to database: 06/24/2026, 18:21:31 UTC

Last enriched: 07/01/2026, 20:51:26 UTC

Last updated: 08/08/2026, 08:54:25 UTC

Views: 447

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses