MalwarePublished 18 May 2026Updated 19 May 2026

tlp clear · Maltrail IOC for 2026-05-19

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-05-19

Impact

There is no direct impact on specific products or systems indicated. The IOC represents a potential malware-related network activity that may warrant monitoring but does not correspond to a known exploit or vulnerability with active impact.

Defensive guidance

Security teams should consider this IOC as part of broader threat intelligence monitoring. No urgent action is indicated based on the provided information.

Summary

The report details a malware-related IOC identified on 2026-05-19 from the CIRCL OSINT Feed. It is classified as a medium-risk observation of network activity without associated affected software versions or active exploitation. The data serves as an open-source intelligence observation rather than a direct vulnerability or exploit.

Indicators of compromise

Domains 332

affirman.commagentocore
arvelito.commagentocore
blogtitop.commagentocore
cdn-flare.commagentocore
cdnflarex.commagentocore
cytrixor.commagentocore
dislen.commagentocore
fancourier.cyoumagentocore
fancourier.vipmagentocore
fimasi.commagentocore

URLs 47

https://api.github.com/repos/stamparm/maltrail/commits/e6d5bbbb33b6ec09bbc74c2d0a2f44dbd59ec18dmagentocore
https://api.github.com/repos/stamparm/maltrail/commits/b1b19217cfaba1c0db670981d582feab3743ff3alummac2
https://api.github.com/repos/stamparm/maltrail/commits/599b20a961ed41417092b4f476efae41b369b92fmagentocore
https://api.github.com/repos/stamparm/maltrail/commits/811b46fec710efe44f0734c20ca1d54e14a3e52cnightshadec2
https://x.com/RacWatchin8872/status/2056506887982420303nightshadec2
https://api.github.com/repos/stamparm/maltrail/commits/48e7d699c15233d2991484bb9abfea01f75a2fd6ailurophile
https://x.com/mopisec/status/2056501914817434115ailurophile
https://www.virustotal.com/gui/file/507a3bd184c32b66645d6aaa7e976e667ee067a10475ef26ba05d17004d34783/detectionailurophile
https://api.github.com/repos/stamparm/maltrail/commits/55b27aefd6cd7b156dff700886fd62837daf23cehacked_npmrepos
https://socket.dev/blog/antv-packages-compromisedhacked_npmrepos

IP addresses 9

101.32.190.202ailurophile
134.122.132.86gh0strat
143.92.61.65gh0strat
156.247.40.163gh0strat
23.226.57.45gh0strat
27.124.44.103gh0strat
27.124.44.106gh0strat
43.249.25.131gh0strat
43.133.164.200adaptix_c2

Community reviews

Loading reviews…