IndicatorPublished 07/12/2026Updated 08/01/2026
Malicious SHA-256 file hash 0dc95fb4077c… (OffSeq Mirage)
Source OffSeq Mirage
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 167 time(s) in attacker activity between 2026-07-12 and 2026-08-01. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in BG, FR, GB, HK, US. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
Indicators of compromise
Hashes 1
- 0dc95fb4077cce0bff19aa1a77109d059dff6503bbf6c1b0dd2f41fc0a4c88e7OffSeq Mirage — a malicious file, observed 2026-07-12..2026-08-01, 167×