IOC Radar
SHA256MediumSignal 89/100

651d8acb52450adbbf07520c91b8a698389f9d27af891f6795605785fdf183e6

First Seen
Mar 23, 2025
Last Seen
Apr 7, 2026
Mar 23
First Seen
467d ago
Apr 7
Last Seen
87d ago
4
Reports
source reports
89%
Confidence
medium
25/76
VirusTotal
detections
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
89%
Signal Score
89 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

28 techniques

Feed Intelligence Summary

4 reports89% confidence
4
Source reports
89%
Confidence score
Category tags
abuseaccount brute forceactive scanactive scanningad-fraudapkauthenticationauthentication attackbad reputationbrute forcebrute force attackcommunication protocolcredential accesscredential brute forcecredential stuffingdata encryptionddosdenial of serviceencryptionenumerationexecutable fileexploitationexploitation activityfile-hashftpftp brute forcegoogle playhttp brute forcehttp scanneridentity & access exploitationimap brute forceindicatorinformation technologyit infrastructurelateral movementlogin attemptsmalwaremobilemobile malwaremobile securitymobile threatnetwork activitynetwork attacksnetwork enumerationnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningpassword attackspop3 brute forceprotocol exploitationransomwarereconnaissanceremote accessremote access attemptsremote servicesresearchedruntime-modulesscams & fraudservice scansmb scanningsmtp brute forcesoftware developmentssh attacksuspected compromiset1018t1021t1021.001t1021.002t1040t1046t1059t1064t1071.001t1076t1077t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1499.002t1499.003t1563t1589t1590t1595t1595.001t1595.002t1595.003tcp protocoltcp scantcp scanningtelnet threatudp scanunauthorized accessvalid accountsweb traffic

Activity Timeline

1 total obs
Apr 7Apr 7

Threat Activity Heatmap

· Peak: 2026-04-07
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), identified as a SHA-256 hash, carries a significant risk score of 88.7 and is not whitelisted, indicating a high likelihood of malicious activity. Its presence in an organizational environment suggests an active threat that could lead to severe consequences. The IOC's strong association with Android scripting and command and control (C2) communication patterns, coupled with potential links to data encryption for impact, poses a direct and serious threat to dat…

Threat ScoreHigh Risk
89
SIGNAL
Signal Score
89%
Confidence
4
Reports
First seenMar 23, 2025
Last seenApr 7, 2026

VirusTotal

25/ 76vendors flagged
33% detection rateJun 2, 2026

WHOIS

description
Zip archive data, at least v2.0 to extract, compression method=deflate
references
https://blog.trendmicro.com/trendlabs-security-intelligence/barcode-reader-apps-on-google-play-found-using-new-ad-fraud-technique/, https://labs.inquest.net/iocdb

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 2 months ago
Appeared in 4 threat reports