🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for sha256_hash 5a26fec81940eaf4f2c8afd61da185a75eb1a5ace95001ba84ec721391be8839.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:2018195
IOC: 5a26fec81940eaf4f2c8afd61da185a75eb1a5ace95001ba84ec721391be8839
IOC Type :sha256_hash
Threat Type :payload
Malware: Unknown Loader
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-11-06 19:08:28 UTC
Last seen:never
UUID:8e356d55-da0c-11f1-a74e-42010aa4000a
Reporter fbazs
Reward 5 credits from ThreatFox
Tags:ClickFix hhunter PluginDex powershell
Reference: https://web.archive.org/web/20261106172412/https://plugin-dex.cc/svvv2.ps1

Avatar
fbazs
SHA256 of the decompressed ClickFix stager svvv2.ps1 (1021 bytes) served at https://plugin-dex.cc/svvv2.ps1, Wayback copy 2026-11-06 17:24 UTC. Fetches https://93.152.209.8:9445/clickfix/AYN9iXh1hl/file and runs the MSI it contains silently.