TF-1868568
high
📛 Threat Title
Unknown malware: SHA256 hash of a malware sample (payload) 4c48cbbd55ff2b63a1fca862b8bb8ff00eec90050b2a2608140bbb3b2ad03f54
Description
Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-08-04 23:39:39 UTC. Reporter: anonymous. Tags: ClickFix, macOS, stealer, swiftDialog, wallet.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
4c48cbbd55ff2b63a1fca862b8bb8ff00eec90050b2a2608140bbb3b2ad03f54
IOC database
- Type
- hash_sha256
- Value
4c48cbbd55ff2b63a1fca862b8bb8ff00eec90050b2a2608140bbb3b2ad03f54- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- SHA256 hash of a malware sample (payload) attributed to Unknown malware
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-08-04 23:39:39 UTC. Reporter: anonymous. Tags: ClickFix, macOS, stealer, swiftDialog, wallet.
Remediations (10)
-
web:bazaar.abuse.ch
MalwareBazaar MalwareBazaar is a platform from abuse.ch and Spamhaus, dedicated to sharing malware samples with the infosec community, antivirus vendors, and threat intelligence providers. Upload malware samples and explore the database for valuable intelligence. Set alerts to track newly observed malware , use APIs to seamlessly push or pull signals, and automate bulk queries. With this ...
-
web:bazaar.abuse.ch
Using the form below, you can search for malware samples by a hash (MD5, SHA256 , SHA1), imphash, tlsh hash , ClamAV signature, tag or malware family. Browse Database
-
web:cipherssecurity.com
What it does When you encounter an unknown executable, the fastest triage step is hash reputation: compute its cryptographic fingerprint and check threat-intel feeds for prior submissions. Our checker queries MalwareBazaar (abuse.ch's curated malicious- sample database) and VirusTotal, returning the aggregated verdict plus per-source details.
-
web:github.com
🔐 Malicious Hash Threat Intelligence Repository A curated collection of malicious file hashes (MD5 / SHA-1 / SHA-256 ) that can be used for blocking, detection and threat hunting across firewalls, EDR, SIEM, SOAR and other security platforms.
-
web:inventivehq.com
Free file hash checker & malicious hash lookup. Drag-drop a file to hash it in your browser, or bulk-check MD5/SHA-1/SHA-256 hashes against malware databases — VirusTotal & MalwareBazaar links included.
-
web:ismalicious.com
Database of known malware file hashes. MD5, SHA1, and SHA256 hashes with malware family classification. Updated daily from sandbox analysis and vendor feeds.
-
web:ismalicious.com
File Hash Reputation MD5, SHA1, and SHA256 malware hash lookup Check a file hash before it becomes a manual investigation bottleneck. Enrich MD5, SHA1, and SHA256 indicators with reputation, malware context, related infrastructure, and API-ready evidence for SOC queues and incident response.
-
web:polyswarm.io
Search millions of analyzed artifacts by hash , IOC, or 1000+ metadata fields. Instant threat intelligence lookups from scan and sandbox results. API-first for SOC automation.
-
web:talosintelligence.com
Use Talos' File Reputation lookup to find the reputation, file name, weighted reputation score, and detection information available for a given SHA256 .
-
web:www.virustotal.com
VirusTotal provides tools for inspecting files, domains, IPs, and URLs to detect malware and other threats.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.