7a9aca9fdd4dcc13fe497cabdb13ca1e5d6a529271c8aa495e5ca1c1c80271ec

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Main worm installer script, not a malware sample

Flagged as a false positive and kept out of the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

SCKit Worm Compromises 288 Endpoints via ScreenConnect Exploitation

2d ago·19 sources

Related Articles (1)

SCKit Worm Installs Rogue ScreenConnect Clients and Session Cookie Relays Across ...

Huntress·2d ago

Related Entities

Worm CVE-2026-84869 RelayTrap SCKit T1021 - Remote Services T1053 - Scheduled Task/Job T1059.001 - PowerShell T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol T1547 - Boot Or Logon Autostart Execution Windows PowerShell