SHA1MediumSignal 94/100

`fa19c6feb7abcd020305a0546681e3e2663f8eff`

First Seen

May 26, 2025

Last Seen

Jun 12, 2026

May 26

First Seen

400d ago

Jun 12

Last Seen

18d ago

Reports

source reports

94%

Confidence

medium

Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.

SHA-1 Hash

SHA-1 file hash associated with malicious samples.

MISP Category

Artifacts Dropped

Hash Algorithm

SHA1

Confidence

94%

Signal Score

94 / 100

IDS Rule

Threat Context

MITRE ATT&CK TTPs

24 techniques

Feed Intelligence Summary

9 reports94% confidence

Source reports

94%

Confidence score

Category tags

abusealienvault_ransomwarebad reputationbotnetbotnet activitycommand and controlcontainer securitycryptocurrencycryptominingdata exfiltrationdata store exposuredistributed attackselfexecutable fileexploitation activityfile-hashindicatorinjection activitykuberneteslinuxmalicious softwaremalwaremetro4shellpeer-to-peerprocess injectionransomwareredis exploitationresearchedt1027t1027.002t1036t1053t1055t1059.004t1070t1071.001t1071.004t1090.001t1098t1105t1110.001t1133t1190t1486t1496t1499.002t1499.003t1552.001t1563t1565t1571t1573targeting databaseupx

Activity Timeline

1 total obs

Jun 12Jun 12

Threat Activity Heatmap

· Peak: 2026-06-12

Less

Mon

Wed

Fri

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Jan

Feb

Mar

Apr

May

Jun

24h

Dormant

30d

Minimal

3mo

Minimal

Threat ScoreHigh Risk

SIGNAL

Signal Score

94%

Confidence

Reports

First seenMay 26, 2025

Last seenJun 12, 2026

VirusTotal

Not checked

WHOIS

description: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, no section header
references: https://www.fortinet.com/blog/threat-research/misconfigured-enrolled-and-dormant-anatomy-of-a-p2pinfect-kubernetes-compromise, IOCs-MAY2.csv

`fa19c6feb7abcd020305a0546681e3e2663f8eff`

MITRE ATT&CK TTPs

Feed Intelligence Summary

Activity Timeline

Threat Activity Heatmap

VirusTotal

WHOIS

Export & API

IOC Journey