Skip to main content
IndicatorPublished 09/07/2026Updated 09/11/2026

Malicious SHA-256 file hash 6a7e1676d52a… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 10 time(s) in attacker activity between 2026-09-07 and 2026-09-11. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in GB. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • 6a7e1676d52a85906d43a543bdb35f8b3282447a5ce8c98dfad33e04afe79dc6OffSeq Mirage — a malicious file, observed 2026-09-07..2026-09-11, 10×

References