IndicatorPublished 10/13/2026Updated 10/21/2026
Malicious SHA-256 file hash cc0e9d0184c0… (OffSeq Mirage)
Source OffSeq Mirage
Description
OffSeq Mirage honeypot sensors observed this SHA-256 file hash 26 time(s) in attacker activity between 2026-10-13 and 2026-10-21. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in HK, IN, KR, TW, US. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.
Indicators of compromise
Hashes 1
- cc0e9d0184c0b930381446b6891769a35711b38c6a57303482e3115f921d4edcOffSeq Mirage — a malicious file, observed 2026-10-13..2026-10-21, 26×