Indicator
Type sha256 · source intel_report_ingest
Verdict
KNOWN MALWARE — Runtimehost
What this is
SHA256 observable db2d33c4e6e4a5c2263b56e8303c3433…
From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
Threat detail
Exploitation status and malware-family attribution from stored fields.
Graph preview
Neighborhood topology — open the graph for interactive pivots.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.