IndicatorPublished 07/31/2026Updated 08/05/2026
Malicious SHA-256 file hash cac00f4de01f… (OffSeq Mirage)
Source OffSeq Mirage
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 79 time(s) in attacker activity between 2026-07-31 and 2026-08-05. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in AR, BR, CA, CN, CO, ET, ID, IN. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
Indicators of compromise
Hashes 1
- cac00f4de01f0b46d9646e425ae88152df96d7393c98099f2a373e86dbd56176OffSeq Mirage — a malicious file, observed 2026-07-31..2026-08-05, 79×