deda7c30d798a19b6699a45fbcba503cf778594df9163c61c2f96bb2d2b9fb45

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Execution policy recovery script, not a malware sample

Flagged as a false positive and kept out of the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

SCKit Worm Compromises 288 Endpoints via ScreenConnect Exploitation

2d ago·19 sources

Related Articles (1)

SCKit Worm Installs Rogue ScreenConnect Clients and Session Cookie Relays Across ...

Huntress·2d ago

Related Entities

Worm CVE-2026-84869 RelayTrap SCKit T1021 - Remote Services T1053 - Scheduled Task/Job T1059.001 - PowerShell T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol T1547 - Boot Or Logon Autostart Execution Windows PowerShell