Malicious SHA-256 file hash d1cac82f44b5… (OffSeq Mirage)
Source OffSeq Mirage · Featured honeypot telemetry (opens in a new tab)
Indicators of compromise
Hashes 1
OffSeq Mirage — a malicious file, observed 2026-08-31..2026-10-29, 2×
Description
A malicious file identified by the SHA-256 hash d1cac82f44b54b0fd244a9e4122811e9ae108a197c7a65a20fd2e7552683e68e was observed by OffSeq Mirage honeypot sensors in attacker activity between August 31, 2026, and October 29, 2026. The activity involved the MITRE ATT&CK technique T1105 (Ingress Tool Transfer), indicating the file was used to stage or deliver a malicious payload such as a dropper, web shell, miner, or post-exploitation tool. The attacker infrastructure was located in Germany. This file hash serves as an indicator of compromise (IOC) to detect this specific malicious payload in environments and security tools.