Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256Signal 53/100
c794f2e5d051c46cd2ff5e429128d7e68954ba78e66735fc69362ec726e63ee4
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Malware Families1
Tags
Feed Intelligence Summary
1 report73% confidence
Google Threat Intelligence (GTIG / Mandiant)
Sep 29, 2026
4 IOCs in report