IoC Investigation

00000000000000000000000000000000000000df

HASH_SHA1 IN DATABASE

SHA-1 Hash · threat 0.50 · 3× seen · 0 datasets · Phishing · last seen 5h ago

🔄 Pivot:📁 Phishing

Threat Score

0.50

Sightings

3
0 sources

Detected Type

HASH_SHA1

Enrichments

0

Related IoCs

20
Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

File Hash — Sandbox & Detection

Detected SHA1. Pivot to sandboxes and malware repositories for detonation reports and family attribution.

↗ VirusTotal ↗ MalwareBazaar ↗ Hybrid Analysis ↗ Triage

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ MalwareBazaar ↗ Hybrid Analysis ↗ Triage ↗ ThreatFox ↗ MalShare Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
societegeneral-securedaccount.fr DOMAIN Phishing investigate →
grcontestzackretsport.000webhostapp.com DOMAIN Phishing investigate →
boutique-dofus.fr DOMAIN Phishing investigate →
finlab7-quibusdam33.sbs DOMAIN Phishing investigate →
finlab7-accusamus87.sbs DOMAIN Phishing investigate →
finlab2-asperiores47.sbs DOMAIN Phishing investigate →
depretraie.autos DOMAIN Phishing investigate →
buwela.click DOMAIN Phishing investigate →
bralvexis.com DOMAIN Phishing investigate →
hydro-pack.net DOMAIN Phishing investigate →
hydrmeter.site DOMAIN Phishing investigate →
hydriintro.rest DOMAIN Phishing investigate →
hydreau-spray.com DOMAIN Phishing investigate →
hydrcurve.site DOMAIN Phishing investigate →
hydraulicpumpssox.info DOMAIN Phishing investigate →
hydoorodynamicistsviomycin.info DOMAIN Phishing investigate →
hyderfy.com DOMAIN Phishing investigate →
hydatrecan.cyou DOMAIN Phishing investigate →
hydanwolff.com DOMAIN Phishing investigate →
hycemou.pro DOMAIN Phishing investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--cae0d71f-0322-40ef-15ec-000040932efa",
    "created": "2026-08-06T23:51:20Z",
    "modified": "2026-08-06T23:51:20Z",
    "name": "SHA-1 Hash: 00000000000000000000000000000000000000df",
    "pattern": "[file:hashes.'SHA-1' = '00000000000000000000000000000000000000df']",
    "pattern_type": "stix",
    "valid_from": "2026-08-06T23:51:20Z",
    "labels": [
        "phishing"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center