IndicatorPublished 08/16/2026Updated 09/04/2026
Malicious SHA-256 file hash 51b052a524af… (OffSeq Mirage)
Source OffSeq Mirage
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2 time(s) in attacker activity between 2026-08-16 and 2026-09-04. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in CN. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
Indicators of compromise
Hashes 1
- 51b052a524af278366fb5527d4a5eee949b63f85168c37d4f97aefe3e73fe66aOffSeq Mirage — a malicious file, observed 2026-08-16..2026-09-04, 2×