Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
SHA256Signal 53/100

7b9efc7ef8957411cdd22582ce4bfb3a5f76d9c91cdb7e36bf85c9785a2480e9

Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.

Oct 16
First Seen
2026
Oct 16
Last Seen
2026
1
Reports
linked reports
73%
Confidence
medium

Found in 1 report: Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Tags

Feed Intelligence Summary

1 report73% confidence
PolySwarm
PolySwarm
Oct 16, 2026
Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools
39 IOCs in report

Activity Timeline

Threat Activity Heatmap

Threat ScoreMedium Risk
53
SIGNAL
Signal Score
73%
Confidence
1
Reports

Export & API

STIX 2.1 Bundle
CSV Export

IOC Journey

Appeared in 1 linked report
Associated with: Royal, Hive, Play, APT33, APT28, Gamaredon, Turla, Black Basta, Volt Typhoon, Ember Bear, DarkSide, Lazarus Group, Conti, Kimsuky, Killnet, TA577, REvil, APT35, Cl0p, DEV-0569, Scattered Spider, APT41, LockBit, Akira, Sandworm, APT38, APT37, APT34, Salt Typhoon, FIN8, MuddyWater, UNC1549, BlackCat, APT29
Used by malware: Hive, Play, Medusa, Royal, QakBot, META Stealer, Mythic, Remcos, NotPetya, Gh0st RAT, IcedID, RedLine, SocGholish, Ursnif, Black Basta, AcidRain, INC Ransom, Stealc, Conti, Akira, BazarLoader, LockBit, Bumblebee, PlugX, CaddyWiper, DarkSide, REvil, Brute Ratel, WhisperGate, Rhadamanthys, Lumma, Mirai, Cl0p, Emotet, BlackCat, Cobalt Strike, XWorm, Rhysida, AsyncRAT, Vidar, HermeticWiper