SHA256MediumSignal 38/100
229b6248baf0d6320e3a44fabf2874ade14e44e694d40a4b1844266bd36ca8e9
First Seen
Jun 5, 2025
Last Seen
Oct 3, 2025
Found in 2 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
38%
Signal Score
38 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
2 reports38% confidence
2
Source reports
38%
Confidence score
Category tags
abuseai applicationsai researchai solutionsai themed attackai-themed malwareartificial intelligencebackdoorbotnetcommand and controlcommand executioncomputer visiondata encryptiondata exfiltrationdeep learningdistributed attacksextortionfake installersfile-hashindicatorinformation stealerinformation technologyingress tool transferit infrastructuremachine learningmalicious powershell activitymalicious softwaremalwaremalware campaignmedianatural language processingnumeropowershell scriptingprocess injectionransomwareremote accessresearchedscripting attackssoftware developmentsystem disruptiont1027t1027.003t1027.004t1036.005t1047t1053t1053.005t1055t1059t1059.001t1070.004t1071.001t1078t1078.001t1086t1105t1129t1133t1140t1189t1190t1203t1204t1204.002t1218.011t1486t1490t1496t1497.001t1499.002t1499.003t1547t1547.001t1565t1566t1566.001t1574t1574.001t1574.002trojan malware
Activity Timeline
Oct 3Oct 3
Threat Activity Heatmap
· Peak: 2025-10-03LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
38
SIGNAL
Signal Score
38%
Confidence
2
Reports
First seenJun 5, 2025
Last seenOct 3, 2025
VirusTotal
Not checked
WHOIS
- references
- https://blog.talosintelligence.com/fake-ai-tool-installers/, https://github.com/Cisco-Talos/IOCs/blob/main/2025/05/fake-AI-installers.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 8 months ago
Appeared in 2 threat reports