Skip to main content
IndicatorPublished 07/16/2026Updated 08/11/2026

Malicious SHA-256 file hash e1568cae9725… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 196 time(s) in attacker activity between 2026-07-16 and 2026-08-11. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in AM, AR, AU, BG, BR, CA, CI, CN. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • e1568cae97252fa9350ef2d2d381975c8bd29e11f126fb06bd64e92a73d7beb9OffSeq Mirage — a malicious file, observed 2026-07-16..2026-08-11, 196×

References