41d2097e8ac636a478aa011e12128c03b3b9bb3c8efca43d3c4f214ac8b1f07b

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

September 9, 2026

Last Seen

September 9, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Listed as the initial payload: rogue ScreenConnect installer

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

Phishing Attacks Utilize Browser-in-the-Browser Technique with Rogue RMM Tools

2d ago·3 sources

Related Articles (1)

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Huntress·2d ago

Related Entities

Phishing T1059.003 - Windows Command Shell T1543.003 - Windows Service T1566.002 - Spearphishing Link Windows HideCursor.exe HideUL.exe ScreenConnect