Skip to main content
IndicatorPublished 07/29/2026Updated 08/02/2026

Malicious SHA-256 file hash 41f06f992406… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 5 time(s) in attacker activity between 2026-07-29 and 2026-08-02. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in NL. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • 41f06f992406b144eaa87a5a91961a8ab4e46d9a38fc94e03ccd644a97252949OffSeq Mirage — a malicious file, observed 2026-07-29..2026-08-02, 5×

References