IndicatorPublished 09/25/2026Updated 10/08/2026
Malicious SHA-256 file hash b16e15764b8b… (OffSeq Mirage)
Source OffSeq Mirage
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 3 time(s) in attacker activity between 2026-09-25 and 2026-10-08. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in IR. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
Indicators of compromise
Hashes 1
- b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793OffSeq Mirage — a malicious file, observed 2026-09-25..2026-10-08, 3×