Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256Signal 53/100
9a1491258e5d0131b0bb237c7221016c737af79961427c1f2fed9f80d75787b3
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: Arsenal revamped: Core Werewolf hits Russian organizations with CoreRAT
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Tags
Feed Intelligence Summary
1 report73% confidence
BI.ZONE
Aug 18, 2026
98 IOCs in report