Malicious SHA-256 file hash ed968e840d10… (OffSeq Mirage)
Source OffSeq Mirage · Featured honeypot telemetry (opens in a new tab)
Indicators of compromise
Hashes 1
OffSeq Mirage — a malicious file, observed 2026-11-13..2026-11-14, 5×
Description
A malicious file identified by the SHA-256 hash ed968e840d10d2d313a870bc131a4e2c311d7ad09bdf32b3418147221f51a6e2 was observed by OffSeq Mirage honeypot sensors during attacker activity between November 13 and 14, 2026. The file is associated with the ATT&CK technique T1105 (Ingress Tool Transfer) and was seen originating from attacker infrastructure in Brazil. This hash corresponds to a specific malicious payload such as a dropper, web shell, miner, or post-exploitation tool that was staged or delivered during the attack. Organizations are advised to match this hash against files in their environments and security feeds to detect potential compromise.