Skip to main content
MalwarePublished Updated

Maltrail IOC for 2026-06-05

Source CIRCL OSINT Feed

0

TLP:CLEAR, disclosure is not limited

Description

Maltrail IOC for 2026-06-05

Indicators of compromise

Domains 203

  • 5q.oscarstars.xyznightshadec2
  • bgnhgrbg.cyounightshadec2
  • enjoymemes.comnightshadec2
  • genericlocalstoragenew.comnightshadec2
  • ms-telemetry-gateway-us.comnightshadec2
  • oscarstars.xyznightshadec2
  • salongallerie.comnightshadec2
  • sub8.eu.orglummac2
  • lkczkqweca.comnightshadec2
  • smokeenew.comnightshadec2

URLs 71

  • https://api.github.com/repos/stamparm/maltrail/commits/076643c2bf9007ae5d7ff5ff386b651859c13ba6hacked_npmrepos
  • https://x.com/KirkDerpca/status/2062690292608782530hacked_npmrepos
  • https://api.github.com/repos/stamparm/maltrail/commits/52380b3ddb5dbd843d4fec01e033ddc29a22aab9android_spynote
  • https://x.com/Fact_Finder03/status/2062778820739146164android_spynote
  • https://www.virustotal.com/gui/file/9acd87765564916acfe5f486984dcce2b04b7a49d9f482b01afa7a65ac91b8b6/detectionandroid_spynote
  • https://www.virustotal.com/gui/file/64b3713f3ea9bd3a28cbb094d7aaaf2e554925394210eeb579c79250670d2c42/detectionandroid_spynote
  • https://api.github.com/repos/stamparm/maltrail/commits/27f6349543e783b0fa1d2042f480162e5b554156nightshadec2
  • https://api.github.com/repos/stamparm/maltrail/commits/358b6654fbf2a867fc181a9659acc05cbad6376flummac2
  • https://api.github.com/repos/stamparm/maltrail/commits/247af57453fb830d6c2964b6fb5cfc9ee65b4929nightshadec2
  • https://otx.alienvault.com/pulse/6a21aa7db4b7cf1351f27cb6nightshadec2

IP addresses 13

  • 213.218.160.189hacked_npmrepos
  • 185.181.11.117android_spynote
  • 43.139.224.138cyberstrikeai
  • 185.215.167.211simplehelp
  • 65.109.255.73vidar
  • 193.70.34.25python_injector
  • 34.154.23.46llmbot
  • 159.138.167.119supershell_c2
  • 181.215.6.77supershell_c2
  • 18.166.47.109valleyrat

Community reviews

Loading reviews…