26bae4d7012bf59847ab4036a065419c3d4ca47e020479f55b3b2c6d0d21394a

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 22, 2026

Last Seen

September 21, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Listed as SHA256 hash of malware payload.

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

Malvertising Campaign Distributes SectopRAT via Fake Claude Desktop App

Jul 23·5 sources

Related Articles (2)

Fakeagent Claude Desktop Malvertising Ends In Dotnet Rat

www.huntress.com·Sep 21

Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with ...

Huntress·Jul 22

Related Entities

Malware Phishing Data Breach FakeAgent Ethereum 0xc1907d7be91f95903ad66d775c397302e7dd9228 0xe012d0f34cde9b870e9d9ed566ea5f8fd9b92228 SecTopRAT T1041 - Exfiltration Over C2 Channel T1053 - Scheduled Task/Job T1071 - Application Layer Protocol T1574 - Hijack Execution Flow