Skip to main content
IndicatorPublished 08/15/2026Updated 09/09/2026

Malicious SHA-256 file hash a6296a79f44e… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 56 time(s) in attacker activity between 2026-08-15 and 2026-09-09. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in AR, BG, BR, CL, CN, CO, DE, HK. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • a6296a79f44e21b76604d2d2bbf795d2cf380f70e39d45fbf166707ff3b4a6a4OffSeq Mirage — a malicious file, observed 2026-08-15..2026-09-09, 56×

References