IndicatorPublished 10/24/2026

Malicious SHA-256 file hash d3e15a3cb34e… (OffSeq Mirage)

Source OffSeq Mirage · Featured honeypot telemetry (opens in a new tab)

Indicators of compromise

Hashes 1

OffSeq Mirage — a malicious file, observed 2026-10-24..2026-10-24, 3×

d3e15a3cb34e3615b12e148369ac3bcebd5566760ebbf569ec59d02505420a74

Description

A malicious file identified by the SHA-256 hash d3e15a3cb34e3615b12e148369ac3bcebd5566760ebbf569ec59d02505420a74 was observed three times on October 24, 2026, by OffSeq Mirage honeypot sensors. The file is associated with attacker activity involving the MITRE ATT&CK technique T1105 (Ingress Tool Transfer). The payload could be a dropper, web shell, miner, or post-exploitation tool. The attacker infrastructure was located in Poland. This indicator should be matched against files in security environments and threat intelligence feeds for detection purposes.

Impact

The presence of this malicious file hash indicates potential compromise involving the transfer of a harmful payload into a target environment. The payload could facilitate further malicious actions such as establishing persistence, mining cryptocurrency, or enabling remote control. However, no active exploitation or widespread impact is confirmed. The threat is limited to detection of the specific payload identified by this hash.

Defensive guidance

No patch or fix is applicable as this is an indicator of compromise rather than a software vulnerability. Security teams should match this SHA-256 hash against files in their environments and integrate it into endpoint detection and response (EDR), antivirus (AV), and threat intelligence feeds to detect and block this malicious payload. Monitoring for T1105 ingress tool transfer activity may also aid detection.

MITRE ATT&CK techniques

From threat tags

T1105Ingress Tool Transfer · Command and Control (opens in a new tab)

References

mirage.offseq.com (opens in a new tab)

Community reviews

Loading reviews…

Indicators of compromise

Hashes 1

Description

AI analysisMachine-generated, updated 10/24/2026, 21:08:55 UTC

Technical details

MITRE ATT&CK techniques

References

Community reviews

Related threats