0bc5342be0bc62f151da889b7fe95b05bbbdd5b6cda89ce1f4433b7c38675890

The presence of the SHA256 hash 0bc5342be0bc62f151da889b7fe95b05bbbdd5b6cda89ce1f4433b7c38675890 is a critical indicator of compromise (IOC) signaling potential malicious activity within the environment. This hash, not whitelisted and exhibiting a high score of 18.0, is strongly linked to a potentially malicious file or process and warrants immediate investigation. The association with AlienVault OTX Feeds, coupled with reports from a Cowrie honeypot, suggests the hash is linked to active attacks targeting exposed services. Failure to address this IOC could result in system compromise, data theft, or further propagation of malware within the network. The identified activity is most likely connected to opportunistic threat actors scanning for and exploiting vulnerable systems. This hash was first seen in March 2025 and activity continues to be observed until April 2025.