Skip to main content
IndicatorPublished 07/12/2026

Malicious SHA-256 file hash 578bfa5ed439… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2 time(s) in attacker activity between 2026-07-12 and 2026-07-12. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in US. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • 578bfa5ed439f9d83b8197f4cf55c893c9f6447929c8df72c696fa9177213d3fOffSeq Mirage — a malicious file, observed 2026-07-12..2026-07-12, 2×

References