TF-1990746 high

Description

Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Unknown malware. Confidence: 90. First seen: 2026-10-26 13:15:50 UTC. Reporter: tipo_deincognito. Tags: Dropper, IranBot, Loader, Sh.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Unknown malware. Confidence: 90. First seen: 2026-10-26 13:15:50 UTC. Reporter: tipo_deincognito. Tags: Dropper, IranBot, Loader, Sh.

• MalwareBazaar | Browse malware samples - abuse.ch
  web:bazaar.abuse.ch

  Browse malware samples MalwareBazaar Database You are browsing the malware sample database of MalwareBazaar. If you would like to contribute malware samples to the corpus, you can do so through either using the web upload or the API.

  2026-10-26 19:45 UTC
• Hash Reputation Checker — MD5/SHA-256 Malware Lookup
  web:cipherssecurity.com

  Check MD5, SHA-1, or SHA-256 file hashes against MalwareBazaar and VirusTotal feeds. Drop a file — hashing happens in your browser, never uploaded.

  2026-10-26 19:45 UTC
• Malware Hash Lookup — Check MD5, SHA-1 & SHA-256
  web:imalware.com

  It compares a file's fingerprint (its MD5, SHA-1 or SHA-256 hash ) with a list of fingerprints of known malware . If the hash matches, the file is identical to a known malicious sample .

  2026-10-26 19:45 UTC
• Hash Checker - File & Malware Hash Lookup | InventiveHQ
  web:inventivehq.com

  Check any file hash in seconds. Paste an MD5, SHA-1 or SHA-256 hash , or drop a file to hash it locally, then check it against live malware feeds.

  2026-10-26 19:45 UTC
• Malware Hashes - File Hash Intelligence | isMalicious
  web:ismalicious.com

  Database of known malware file hashes. MD5, SHA1, and SHA256 hashes with malware family classification. Updated daily from sandbox analysis and vendor feeds.

  2026-10-26 19:45 UTC
• MalwareAnalyzer by Cyble, Malware Analysis and URL Scanning
  web:malwareanalyzer.com

  MalwareAnalyzer is a public malware analysis and threat intelligence platform. You submit a file, a URL, or a hash , and it returns a verdict backed by multi-engine static scanning, real sandbox execution, extracted indicators, and a threat graph you can pivot through.

  2026-10-26 19:45 UTC
• Check a File Hash for Malware — Local Hashing & Lookup Workflow
  web:osintdashboard.dev

  Safely identify a suspicious file: compute its MD5 and SHA-256 hashes locally in the browser, look the digest up against malware databases, and cross-validate before escalating. The file itself never leaves your machine.

  2026-10-26 19:45 UTC
• File Hash Checker — Look Up MD5, SHA-1 & SHA-256 Hashes
  web:osintdashboard.dev

  Look up MD5, SHA-1, or SHA-256 file hashes against malware databases to check if a file is known malicious.

  2026-10-26 19:45 UTC
• HashZyn — Online malware scanner for files, hashes, and URLs
  web:www.hashzyn.com

  HashZyn is an online malware scanner and API. It computes SHA-256 hashes in your browser, scans unknown files and URLs against commercial engines and threat feeds, and returns a single verdict: clean, suspicious, or malicious.

  2026-10-26 19:45 UTC
• Check Any File Against Our Malware Hash Database | Team Cymru
  web:www.team-cymru.com

  The Malware Hash Registry is a programmatic hash validation service operated by TeamCymru. Submit an MD5, SHA-1, or SHA-256 hash via HTTPS, DNS, or WHOIS and get back a near-real-time response showing the last time the sample was seen and the percentage of 30+ antivirus databases that flagged it.

  2026-10-26 19:45 UTC

Only Available for Registered Users. Sign in to view.