MalwarePublished 9 Jun 2026Updated 10 Jun 2026

Maltrail IOC for 2026-06-10

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

This entry reports a Maltrail Indicator of Compromise (IOC) dated 2026-06-10, categorized as malware-related network activity. It originates from the CIRCL OSINT Feed and is classified as a medium-risk observation based on available threat intelligence. No specific affected software versions or exploitation details are provided. There is no patch or remediation available, and no known exploits in the wild have been reported.

Impact

The impact is limited to the presence of malware-related network activity indicators detected by Maltrail. There is no information on specific systems or software affected, nor on exploitation or compromise outcomes. Without further details, the impact remains an alert for potential malicious activity rather than a confirmed vulnerability or active exploit.

Defensive guidance

Organizations should monitor their network traffic for indicators matching the Maltrail IOC and apply standard incident response procedures if suspicious activity is detected. Since this is an OSINT observation without direct exploit or vulnerability, no specific fixes are applicable.

Summary

The report details a Maltrail IOC for June 10, 2026, indicating detection of suspicious or malicious network activity associated with malware. The information is derived from open-source intelligence (OSINT) and represents an external analysis observation without further technical indicators or exploit details. No affected software versions or vulnerabilities are specified, and no patches exist for this IOC. The threat is assessed as medium severity based on the source classification.

Indicators of compromise

Domains 186

bswinpay.com
google-analysis.netmagentocore
cyber.zeroa.devcyberstrikeai
pk-cc.comapt_sidewinder
pk-qrs.onlineapt_sidewinder
visa.nadra.gov.pk-cc.comapt_sidewinder
alqaflah.comapt_lazarus
admin.rohapowers.comapt_lazarus
friendly-trifle-f3e6f0.netlify.apppowershell_injector
t-internal.skadaptix_c2

URLs 59

https://api.github.com/repos/stamparm/maltrail/commits/c334ebfee9db15fa23ad5a8e4a264655f673c927
https://www.virustotal.com/gui/ip-address/184.174.96.105/relations
https://api.github.com/repos/stamparm/maltrail/commits/a1bd6a53be5f7b86e593d28da76fccd697d926f8magentocore
https://api.github.com/repos/stamparm/maltrail/commits/b00b6c20b3791d9267cc00599681a28ea069c9adcyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/fe0de778506d54e2761521984004cbb5d0e65beeapt_sidewinder
https://api.github.com/repos/stamparm/maltrail/commits/a40910f3fcfdac1de74d7d780df4b6e8d8daa45eapt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/3f3491e7ffedf5457d3769b5523391e5ec9463e8powershell_injector
https://api.github.com/repos/stamparm/maltrail/commits/0b82355fab77526642e23235ea79b9b2fdf71a9cpowershell_injector
https://www.virustotal.com/gui/file/1ca86dcafd0b6d208c072760919b38b830ca907f8cc3c77401275731d422ce63/detectionpowershell_injector
https://api.github.com/repos/stamparm/maltrail/commits/22bfbd5189d9486a999bdba54c6e3fbcd54ab276adaptix_c2

IP addresses 16

38.76.169.176cyberstrikeai
46.101.23.113cyberstrikeai
95.85.229.133powershell_injector
45.13.212.231netsupport
103.214.174.248lkmc2
108.61.193.37lkmc2
45.91.81.112lkmc2
45.91.81.190lkmc2
151.247.210.135c2_panel
31.76.16.211tsundere

Community reviews

Loading reviews…