Indicator
Type sha256 · source intel_report_ingest
Verdict
KNOWN MALWARE — Runtimehost
What this is
SHA256 observable c7425fbe6c3a4937934215c54027d4b6…
From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
Threat detail
Exploitation status and malware-family attribution from stored fields.
Graph preview
Neighborhood topology — open the graph for interactive pivots.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.