Skip to main content
IndicatorPublished 07/14/2026

Malicious SHA-256 file hash b48d39eafd92… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 31 time(s) in attacker activity between 2026-07-14 and 2026-07-14. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in CA, IN, TR. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • b48d39eafd924b042bdfae32f0e19b0e9ff870b46d46f6ca7859e9dfc5a927d7OffSeq Mirage — a malicious file, observed 2026-07-14..2026-07-14, 31×

References