Skip to main content
IndicatorPublished 07/12/2026

Malicious SHA-256 file hash 6ef4fcf12a66… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2 time(s) in attacker activity between 2026-07-12 and 2026-07-12. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in US. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • 6ef4fcf12a66fb4f240fd1357a3e4c519f8f28e82146209168ce145d2b762991OffSeq Mirage — a malicious file, observed 2026-07-12..2026-07-12, 2×

References