IndicatorPublished 07/11/2026Updated 07/12/2026
Malicious SHA-256 file hash 9f44bf644db7… (OffSeq Mirage)
Source OffSeq Mirage
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 8 time(s) in attacker activity between 2026-07-11 and 2026-07-12. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in CN, IN, PK, SE. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
Indicators of compromise
Hashes 1
- 9f44bf644db7bdaee5ffdbe66b5db29861fe10aa39ce3ed1738b1bc15a5ce6daOffSeq Mirage — a malicious file, observed 2026-07-11..2026-07-12, 8×