IndicatorPublished 2 Nov 2026

Malicious SHA-256 file hash b6833206a0c5… (OffSeq Mirage)

Source OffSeq Mirage · Featured honeypot telemetry (opens in a new tab)

Indicators of compromise

Hashes 1

OffSeq Mirage — a malicious file, observed 2026-11-02..2026-11-02, 2×

b6833206a0c545d501275e8fd91955befd900adfdf1a4bfb0c0759bf3606e9bb

Description

A malicious file identified by the SHA-256 hash b6833206a0c545d501275e8fd91955befd900adfdf1a4bfb0c0759bf3606e9bb was observed by OffSeq Mirage honeypot sensors on 2026-11-02. The file is associated with attacker activity involving the MITRE ATT&CK technique T1105 (Ingress Tool Transfer) and was seen originating from attacker infrastructure in France. This hash fingerprints a specific malicious payload that could be a dropper, web shell, miner, or post-exploitation tool. Organizations are advised to check their environments and security tools for this file hash to detect potential compromise.

Impact

The malicious file identified by this hash is linked to attacker activity involving the transfer of tools or payloads into victim environments, which may facilitate further compromise such as persistence, data theft, or resource abuse. However, no direct evidence of exploitation or active campaigns beyond the observed honeypot detections is reported. The impact depends on the nature of the payload (dropper, web shell, miner, or post-exploitation tool) but generally indicates a security breach attempt.

Defensive guidance

Organizations should match this SHA-256 hash against files in their environments and update EDR/AV and threat intelligence feeds to detect and block this malicious payload. Monitoring for the MITRE ATT&CK technique T1105 (Ingress Tool Transfer) can help identify similar attacker behaviors. No further action is specified by the source.

References

mirage.offseq.com (opens in a new tab)

Community reviews

Loading reviews…

Indicators of compromise

Hashes 1

Description

AI analysisMachine-generated, updated 2 Nov 2026, 16:43 UTC

MITRE ATT&CK techniques1 from threat tags

Technical details

References

Community reviews

Related threats