MalwarePublished 13 Mar 2026

tlp clear · Maltrail IOC for 2026-03-13

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-13

Impact

No direct impact or exploitation is documented. The IOC serves as an alert for potential malware-related network activity but does not confirm active exploitation or vulnerabilities in specific products. No known exploits or patches are associated with this IOC.

Defensive guidance

Security teams should incorporate this IOC into their threat intelligence and monitoring systems as appropriate. Since no active exploitation is reported, no urgent mitigation actions are required based on this IOC alone.

Summary

The report details a malware-related IOC published by CIRCL OSINT Feed on 2026-03-13. It is classified as medium severity and relates to network activity observed externally. No specific affected software versions or exploitation details are included. The IOC is part of ongoing threat intelligence collection but lacks actionable technical indicators or exploit information.

Indicators of compromise

Domains 1,063

rvtoolsup.comapt_unc2465
clabmadamba.pages.devosx_atomic
hidkomas.pages.devosx_atomic
espainaturalment.comosx_atomic
lifewithdogsstudio.comosx_atomic
dzkxxcsbrg7bwnlwwer563yuxd5pesr42dx634w5xvofm5z6qjw72ayd.onionlokilock
bahria-edu.workers.devapt_sidewinder
cc-cvbs-sco.workers.devapt_sidewinder
cms.bahria-edu.workers.devapt_sidewinder
support.cc-cvbs-sco.workers.devapt_sidewinder

URLs 68

https://api.github.com/repos/stamparm/maltrail/commits/9e88f9d191fc0b5be62c51a5c36e0be78ba17a85apt_unc2465
https://api.github.com/repos/stamparm/maltrail/commits/ec3d4c6ab59d66b9ec3812080e0da4e2644201b7supershell_c2
https://api.github.com/repos/stamparm/maltrail/commits/01085b0474da9bea5bf1efe512b5e60cdb47679dosx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/72b4766a0141521a479b0bb55578b9f437858a19lokilock
https://x.com/fbgwls245/status/2032092105720651841lokilock
https://api.github.com/repos/stamparm/maltrail/commits/2b7d2deb06eb60dfceb841b57f5772d9103b2d2bapt_sidewinder
https://x.com/RedDrip7/status/2032290347527913562apt_sidewinder
https://www.virustotal.com/gui/file/67c341e187ddfcd5a4a7df8743ae82e72db1e5c3747d5c4e185d99f54182f093/detectionapt_sidewinder
https://www.virustotal.com/gui/file/e5474cad56d35160c83378e6719f7c2331333581ab78a0428d0c425a3049e50f/detectionapt_sidewinder
https://api.github.com/repos/stamparm/maltrail/commits/c96cfcdd137652a169b0d362d53738a5ef31408dapt_sidewinder

IP addresses 106

172.245.82.123supershell_c2
186.169.43.64xworm
89.124.77.234powershell_injector
115.159.42.173cyberstrikeai
117.72.74.158cyberstrikeai
172.86.114.64cyberstrikeai
43.130.44.204cyberstrikeai
45.192.103.176cyberstrikeai
51.195.25.206cyberstrikeai
52.78.242.188cyberstrikeai

Community reviews

Loading reviews…