IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
SHA256HighVerifiedSignal 56/100

5b4f59236a9b950bcd5191b35d19125f60cfb9e1a1e1aa2e4f914b6745dde9df

First Seen
Oct 6, 2026
Last Seen
Oct 9, 2026
Oct 6
First Seen
2d ago
Oct 9
Last Seen
today
2
Reports
source reports
75%
Confidence
high
Found in 2 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
75%
Signal Score
56 / 100
IDS Rule
Yes
Threat Context
Threat Actors2
TTurlaTTA4922
Tags

Feed Intelligence Summary

2 reports75% confidence
AC
ANY.RUN Cybersecurity Blog
3d ago
IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime
10 IOCs in report
PT
Proofpoint Threat Insight
Jul 20, 2026
Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service
20 IOCs in report

Activity Timeline

2 total obs
Oct 6Jul 20

Threat Activity Heatmap

· Peak: 2026-07-20
Less
More
Mon
Wed
Fri
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
·
Jul
·
·
·
Aug
·
·
·
·
Sep
·
·
·
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
2
Minimal
Threat ScoreMedium Risk
56
SIGNAL
Signal Score
75%
Confidence
2
Reports
First seenOct 6, 2026
Last seenOct 9, 2026
Verified IOC

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 2 days ago · Last seen today
Appeared in 2 threat reports from 2 sources
Associated with: Turla, TA4922
Used by malware: Remcos, AgentTesla, XWorm, AsyncRAT, FormBook, Gh0st RAT