Skip to main content
IndicatorPublished 07/19/2026Updated 07/22/2026

Malicious SHA-256 file hash a531f3e62248… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 2 time(s) in attacker activity between 2026-07-19 and 2026-07-22. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in DE. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • a531f3e6224862abd00091c4955d535ace2bb886df53bdcd59c3a32b44c93629OffSeq Mirage — a malicious file, observed 2026-07-19..2026-07-22, 2×

References