Malicious SHA-256 file hash a8a4c7376a27… (OffSeq Mirage)
Source OffSeq Mirage · Featured honeypot telemetry (opens in a new tab)
Indicators of compromise
Hashes 1
OffSeq Mirage — a malicious file, observed 2026-11-02..2026-11-04, 2×
Description
A malicious file identified by the SHA-256 hash a8a4c7376a27c9b5ad8cdc6a0fd970b77e28843b2a0349f4e1b49ad5bdcdf6d7 was observed by OffSeq Mirage honeypot sensors during attacker activity between November 2 and November 4, 2026. The file is associated with the MITRE ATT&CK technique T1105 (Ingress Tool Transfer) and is linked to attacker infrastructure located in Romania. This hash fingerprints a specific malicious payload that could be a dropper, web shell, miner, or post-exploitation tool. The file was seen twice in the wild during this period. There is no information about active exploitation or known threat actors. No affected software versions are specified.