94b93c649b0ae0281352da9d01761fa9195ab1e6ac7010af3b9ba1646355eb11

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Main worm installer script, not a malware sample

Flagged as a false positive and kept out of the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

SCKit Worm Compromises 288 Endpoints via ScreenConnect Exploitation

2d ago·19 sources

Related Articles (1)

SCKit Worm Installs Rogue ScreenConnect Clients and Session Cookie Relays Across ...

Huntress·2d ago

Related Entities

Worm CVE-2026-84869 RelayTrap SCKit T1021 - Remote Services T1053 - Scheduled Task/Job T1059.001 - PowerShell T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol T1547 - Boot Or Logon Autostart Execution Windows PowerShell