Ambush Hag

Multiattack. The ambush hag makes two Claw attacks or three Poison Spray attacks. It can replace one attack with a use of Spellcasting.

Claw. _Melee Weapon Attack:_ +8 to hit, reach 5 ft., one target. _Hit:_ 13 (2d8+4) slashing damage plus 18 (4d8) poison damage, and the target must succeed on a DC 16 CON save or be paralyzed for 1 minute. The creature can repeat the save at the end of each of its turns, ending the effect on itself on a success.

Poison Spray. _Ranged Spell Attack:_ +8 to hit, range 60 ft., one target. _Hit:_ 22 (4d8+4) poison damage, and the target must succeed on a DC 16 STR save or be restrained until the end of its next turn.

Spellcasting. The ambush hag casts one of the following spells, requiring no material components and using CHA as the spellcasting ability (spell save DC 16):<br>At will: _message_, _minor illusion_, _prestidigitation_<br>3/day each: _blur_, _charm_, _hallucinatory terrain_ (as an action)<br>1/day each: _hypnotic pattern_, _major image_, _seeming_

Illusory Appearance. The hag covers itself and anything it is wearing or carrying with a magical illusion that makes it look like another creature of its general size and humanoid shape. The illusion ends if the hag takes a bonus action to end it or if the hag dies.<br>The changes wrought by this effect fail to hold up to physical inspection. For example, the hag could appear to have smooth skin, but someone touching it would feel its rough flesh. Otherwise, a creature must take an action to visually inspect the illusion and succeed on a DC 20 INT (Investigation) check to discern that the hag is disguised.