SHA256MediumSignal 100/100

`a4d26fba133ea892d82fe3e161d56c8ca4d184d5de77349407f471aa5e9eae87`

First Seen

Mar 23, 2025

Last Seen

Feb 20, 2026

Mar 23

First Seen

466d ago

Feb 20

Last Seen

133d ago

Reports

source reports

99%

Confidence

medium

Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.

SHA-256 Hash

SHA-256 file hash — primary identifier for malware samples.

MISP Category

Artifacts Dropped

Hash Algorithm

SHA256

Confidence

99%

Signal Score

100 / 100

IDS Rule

Threat Context

MITRE ATT&CK TTPs

28 techniques

Feed Intelligence Summary

4 reports99% confidence

Source reports

99%

Confidence score

Category tags

abuseaccount brute forceactive scanningad-fraudapkauthenticationauthentication attackbrute forcebrute force attackcommunication protocolcommunication technologiescredential accesscredential brute forcecredential stuffingdata encryptiondenial of serviceenumerationexploitationfile-hashftpftp brute forcegoogle playhttp brute forcehttp scannerimap brute forceindicatorinformation technologyit infrastructurelateral movementlogin attemptsmalwaremobilemobile carriersmobile malwaremobile networksmobile securitynetwork activitynetwork attacksnetwork enumerationnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningpassword attackspop3 brute forceprotocol exploitationreconnaissanceremote accessremote access attemptsremote servicesresearchedruntime-modulessmb scanningsmtp brute forcesoftware developmentssh attacksuspected compromiset1018t1021t1021.001t1021.002t1040t1046t1059t1064t1071.001t1076t1077t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1499.002t1499.003t1563t1589t1590t1595t1595.001t1595.002t1595.003tcp protocoltcp scantcp scanningtelecom servicestelecommunicationstelnet threatudp scanunauthorized accessvalid accountsweb traffic

Activity Timeline

1 total obs

Feb 20Feb 20

Threat Activity Heatmap

· Peak: 2026-02-20

Less

Mon

Wed

Fri

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Jan

Feb

Mar

Apr

May

Jun

24h

Dormant

30d

Dormant

3mo

Dormant

Threat ScoreHigh Risk

100

SIGNAL

Signal Score

99%

Confidence

Reports

First seenMar 23, 2025

Last seenFeb 20, 2026

VirusTotal

Not checked

WHOIS

description: Zip archive data, at least v2.0 to extract, compression method=deflate

`a4d26fba133ea892d82fe3e161d56c8ca4d184d5de77349407f471aa5e9eae87`

MITRE ATT&CK TTPs

Feed Intelligence Summary

Activity Timeline

Threat Activity Heatmap

VirusTotal

WHOIS

Export & API

IOC Journey