Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA1VerifiedSignal 56/100
7d1d49a8d8c1fa7b4b743ed551fa338c112268e1
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 2 reports: Funnull Resurfaces: Exposing RingH23 Arsenal and MacCMS Supply Chain Attacks; 围剿FUNNULL黑产：深度揭秘RingH23与MacCMS投毒攻击链
SHA-1 Hash
SHA-1 file hash associated with malicious samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA1
Confidence
75%
Signal Score
56 / 100
IDS Rule
Yes
Threat Context
Tags
Feed Intelligence Summary
2 reports75% confidence
XLab
Mar 2, 2026
80 IOCs in report