Malicious SHA-256 file hash 01ba4719c80b… (OffSeq Mirage)
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2,357 time(s) in attacker activity between 2026-06-24 and 2026-07-09. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in IR, IN, MX, JP, BR, TW, PK, TR. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
AI Analysis
Technical Summary
OffSeq Mirage honeypot sensors detected the SHA-256 hash 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b 974 times in attacker activity between June 24 and July 1, 2026. The hash fingerprints a malicious payload involved in ingress tool transfer (T1105), such as a dropper or web shell. There is no evidence of a specific vulnerability being exploited or known active campaigns tied to this hash. No vendor advisories or patches are associated with this indicator. It functions as an indicator of compromise (IOC) for detection purposes.
Potential Impact
There is no confirmed direct impact from this indicator alone. It represents observed attacker activity involving a malicious payload but does not correspond to a known vulnerability or exploit affecting specific software or systems. No known exploits in the wild or vendor advisories are linked to this hash.
Mitigation Recommendations
No specific remediation or patch is applicable since this is an indicator of attacker activity rather than a vulnerability. Security teams should incorporate this SHA-256 hash into detection and monitoring tools such as EDR, antivirus, and threat intelligence feeds to identify potential malicious activity. No official fixes or vendor advisories are available.
Indicators of Compromise
- hash: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
Malicious SHA-256 file hash 01ba4719c80b… (OffSeq Mirage)
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2,357 time(s) in attacker activity between 2026-06-24 and 2026-07-09. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in IR, IN, MX, JP, BR, TW, PK, TR. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OffSeq Mirage honeypot sensors detected the SHA-256 hash 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b 974 times in attacker activity between June 24 and July 1, 2026. The hash fingerprints a malicious payload involved in ingress tool transfer (T1105), such as a dropper or web shell. There is no evidence of a specific vulnerability being exploited or known active campaigns tied to this hash. No vendor advisories or patches are associated with this indicator. It functions as an indicator of compromise (IOC) for detection purposes.
Potential Impact
There is no confirmed direct impact from this indicator alone. It represents observed attacker activity involving a malicious payload but does not correspond to a known vulnerability or exploit affecting specific software or systems. No known exploits in the wild or vendor advisories are linked to this hash.
Defensive Guidance
No specific remediation or patch is applicable since this is an indicator of attacker activity rather than a vulnerability. Security teams should incorporate this SHA-256 hash into detection and monitoring tools such as EDR, antivirus, and threat intelligence feeds to identify potential malicious activity. No official fixes or vendor advisories are available.
Technical Details
- Severity Source
- AI-assessed (no CVSS data)
Indicators of Compromise
Hash
| Value | Description | Copy |
|---|---|---|
hash01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b | OffSeq Mirage — observed 2026-06-24..2026-06-24, 22× |
Threat ID: 6a3c202b748d17fc4febe8b9
Added to database: 06/24/2026, 18:21:31 UTC
Last enriched: 07/01/2026, 20:51:26 UTC
Last updated: 08/08/2026, 08:54:25 UTC
Views: 447
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.