Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256Signal 53/100
5e2420bf60f0d86f6483c85eb80214f13c061f455434ecba6612f89afb8b3ce3
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: Warlock Group: We’re only here for SharePoint and the Lamborghinis
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Threat Actors1
Tags
Feed Intelligence Summary
1 report73% confidence
t0asts blog
Aug 16, 2025
5 IOCs in report