TF-1868567
high
📛 Threat Title
Unknown malware: SHA256 hash of a malware sample (payload) 04b8d6f7158689a311b22200c4c0fb5186a6751a422b5510b5a5fbf1c2a9cd5f
Description
Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-08-04 23:39:38 UTC. Reporter: anonymous. Tags: ClickFix, macOS, stealer, swiftDialog, wallet.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
04b8d6f7158689a311b22200c4c0fb5186a6751a422b5510b5a5fbf1c2a9cd5f
IOC database
- Type
- hash_sha256
- Value
04b8d6f7158689a311b22200c4c0fb5186a6751a422b5510b5a5fbf1c2a9cd5f- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- SHA256 hash of a malware sample (payload) attributed to Unknown malware
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-08-04 23:39:38 UTC. Reporter: anonymous. Tags: ClickFix, macOS, stealer, swiftDialog, wallet.
Remediations (10)
-
web:bazaar.abuse.ch
Using the form below, you can search for malware samples by a hash (MD5, SHA256 , SHA1), imphash, tlsh hash , ClamAV signature, tag or malware family. Browse Database
-
web:bazaar.abuse.ch
You are currently viewing the MalwareBazaar entry for SHA256 226a723ffb4a91d9950a8b266167c5b354ab0db1dc225578494917fe53867ef2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
-
web:cipherssecurity.com
What it does When you encounter an unknown executable, the fastest triage step is hash reputation: compute its cryptographic fingerprint and check threat-intel feeds for prior submissions. Our checker queries MalwareBazaar (abuse.ch's curated malicious- sample database) and VirusTotal, returning the aggregated verdict plus per-source details.
-
web:github.com
🔐 Malicious Hash Threat Intelligence Repository A curated collection of malicious file hashes (MD5 / SHA-1 / SHA-256 ) that can be used for blocking, detection and threat hunting across firewalls, EDR, SIEM, SOAR and other security platforms.
-
web:inventivehq.com
Free file hash checker & malicious hash lookup. Drag-drop a file to hash it in your browser, or bulk-check MD5/SHA-1/SHA-256 hashes against malware databases — VirusTotal & MalwareBazaar links included.
-
web:ismalicious.com
Database of known malware file hashes. MD5, SHA1, and SHA256 hashes with malware family classification. Updated daily from sandbox analysis and vendor feeds.
-
web:ismalicious.com
File Hash Reputation MD5, SHA1, and SHA256 malware hash lookup Check a file hash before it becomes a manual investigation bottleneck. Enrich MD5, SHA1, and SHA256 indicators with reputation, malware context, related infrastructure, and API-ready evidence for SOC queues and incident response.
-
web:polyswarm.io
Search millions of analyzed artifacts by hash , IOC, or 1000+ metadata fields. Instant threat intelligence lookups from scan and sandbox results. API-first for SOC automation.
-
web:talosintelligence.com
Use Talos' File Reputation lookup to find the reputation, file name, weighted reputation score, and detection information available for a given SHA256 .
-
web:www.virustotal.com
VirusTotal provides tools for inspecting files, domains, IPs, and URLs to detect malware and other threats.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.