IOC Radar
SHA256MediumSignal 99/100

3bddb2e1a85a9e06b9f9021ad301fdcde33e197225ae1676b8c6d0b416193ecf

First Seen
Jul 4, 2024
Last Seen
Mar 27, 2026
Jul 4
First Seen
728d ago
Mar 27
Last Seen
98d ago
8
Reports
source reports
99%
Confidence
medium
44/75
VirusTotal
detections
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
99%
Signal Score
99 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

35 techniques

Feed Intelligence Summary

8 reports99% confidence
8
Source reports
99%
Confidence score
Category tags
abuseactive scanningauthenticationauthentication abuseauthentication attackauthentication attemptauthentication attemptsbotnetbrute forcebrute force attackbrute force attackscalls-wmicommand and controlcommunication protocolcompromised hostcredential accesscredential attackcredential harvestingcredential stuffingdata encryptiondata exfiltrationdatabase brute forcedenial of servicedistributed attacksdocxenumerationexploitexploitationfile-hashftpftp brute forcehttp brute forcehttp scannerhttpsimapimap brute forceindicatorintrusion detectionioclateral movementlogin attacklogin attemptlogin attemptslogin brute forcemalicious softwaremalwarenetwork activitynetwork attacksnetwork enumerationnetwork intrusionnetwork intrusion attemptnetwork intrusion attemptsnetwork probingnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningpassword attackpassword attacksphishing attackpop3 brute forcepotential botnet activitypotential exploitpotential intrusionprocess injectionprotocol exploitationreconnaissanceremote accessremote access attemptsremote servicesresearchedscannerscanning activitysecurity operationsservice enumerationservice exploitation attemptsmb brute forcesmb enumerationsmb scanningsmtpsmtp brute forcesocial engineeringssh attacksuspected compromisesuspected malicious ipsyn scansystem accesst1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.004t1071.001t1076t1077t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1589t1592t1595t1595.001t1595.002t1595.003tcp protocoltcp scantcp scanningtelnet threattextthreat intelligenceudp scanunauthorized accessunauthorized access attemptvalid accountsweb trafficword

Activity Timeline

1 total obs
Mar 27Mar 27

Threat Activity Heatmap

· Peak: 2026-03-27
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC) represents a critical and high-severity threat, evidenced by its significant score of 98.5 and its confirmed malicious nature, as indicated by a 'No' whitelist status. This specific IOC, a SHA-256 hash, is strongly associated with malicious files that, if present within an organizational environment, could lead to severe compromise, including but not limited to, data exfiltration, system takeover, or the deployment of ransomware. Its widespread detection across…

Threat ScoreHigh Risk
99
SIGNAL
Signal Score
99%
Confidence
8
Reports
First seenJul 4, 2024
Last seenMar 27, 2026

VirusTotal

44/ 75vendors flagged
59% detection rateJun 3, 2026

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 3 months ago
Appeared in 8 threat reports