Skip to main content
IndicatorPublished 10/09/2026

Malicious SHA-256 file hash 1ecfe3ec7b25… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2 time(s) in attacker activity between 2026-10-09 and 2026-10-09. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in SE. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • 1ecfe3ec7b25893dc55c0ed14196a817f1edd0469cca0a6ad42974d0eccbf146OffSeq Mirage — a malicious file, observed 2026-10-09..2026-10-09, 2×

References