5dd3a6ba806ac472663e243cfc1c034c534d5d9a42ec362c3dbf0f8d950148d0

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Cleanup script, not a malware sample

Flagged as a false positive and kept out of the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

SCKit Worm Compromises 288 Endpoints via ScreenConnect Exploitation

2d ago·19 sources

Related Articles (1)

SCKit Worm Installs Rogue ScreenConnect Clients and Session Cookie Relays Across ...

Huntress·2d ago

Related Entities

Worm CVE-2026-84869 RelayTrap SCKit T1021 - Remote Services T1053 - Scheduled Task/Job T1059.001 - PowerShell T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol T1547 - Boot Or Logon Autostart Execution Windows PowerShell