IOC Radar
SHA256MediumSignal 51/100

00005cd463a82f38d30902563784b78c68811d6dac1df6bfdd205b19f75335d0

Location
PeruPeru
First Seen
Apr 16, 2026
Last Seen
May 21, 2026
Apr 16
First Seen
78d ago
May 21
Last Seen
43d ago
3
Reports
source reports
51%
Confidence
medium
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
51%
Signal Score
51 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Feed Intelligence Summary

3 reports51% confidence
3
Source reports
51%
Confidence score
Category tags
acceptactive scanandroid sandboxbasebazaarbodychatcitycloud14cloud14 addresscrc32current objectdarkbotdetect-debug-environmentdonedropped infoentity cloud14exploitation activityfile-hashfullfunctionguardguest systemhandlehas permissioniframeindicatorinvalid-signaturelibrarymainexemetamitre attackmobile threatmwdbnation-state activitynet104net1040000network infonextnoscriptoverlayoverview zenboxpasspe filepeexepersistperuprocesses extrapx8be px8bepxe8 pxe8pxff pxffqxff qxffresearchedrxff rxffsan franciscoscriptsignedsouth americassdeepstrongstylesx8bt1055t1055 processt1056t1057t1071t1082t1091t1106t1120t1202t1574threat actortitletownsend streetverdictvtuishellvulnerability scanvxff vxffwhois serverwindowswx8bx8bxe5xf7xd8 xf7xd8zenbox android

Activity Timeline

1 total obs
May 21May 21

Threat Activity Heatmap

· Peak: 2026-05-21
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), a distinct SHA-256 hash, carries significant implications for organizational security, demanding prompt attention. With a substantial risk score of 51.36 and its presence across multiple authoritative threat intelligence feeds, this hash is strongly indicative of a sophisticated threat. Its association with advanced attack techniques, including process injection, input capture, and established command and control capabilities, points towards an adversary adept…

Threat ScoreMedium Risk
51
SIGNAL
Signal Score
51%
Confidence
3
Reports
First seenApr 16, 2026
Last seenMay 21, 2026

VirusTotal

Not checked

WHOIS

description
PE32 executable (GUI) Intel 80386, for MS Windows

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 1 month ago
Appeared in 3 threat reports