MalwarePublished 14 Jun 2026Updated 15 Jun 2026

Maltrail IOC for 2026-06-15

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

This entry reports a Maltrail Indicator of Compromise (IOC) dated 2026-06-15 related to malware activity. It is an OSINT observation from the CIRCL OSINT Feed with a medium risk threat level. No specific affected software versions or detailed technical indicators are provided. No patch or remediation is available or applicable. The threat is categorized under network activity and external analysis.

Impact

The impact is assessed as medium risk based on the source classification. There is no evidence of active exploitation or specific vulnerable software. The IOC indicates potential malware-related network activity that may warrant monitoring but does not specify direct compromise or damage.

Defensive guidance

Security teams should consider this IOC as part of their threat intelligence feeds and apply standard monitoring for related network activity. No urgent action is indicated by the source.

Indicators of compromise

Domains 69

grxapi.commagentocore
coldmevrix.commagentocore
swiftnovar.commagentocore
syncroval.commagentocore
estevss.icuek_landupdate808
oliveiaa.icuek_landupdate808
codezfree.onlineapt_transparenttribe
crosagi-gov-in.infoapt_transparenttribe
crs-gov.comapt_transparenttribe
crsorgi-gov-in.proapt_transparenttribe

URLs 11

https://api.github.com/repos/stamparm/maltrail/commits/99d90db6b4baaa29fc10b143d134d07c2a5c113bmagentocore
https://api.github.com/repos/stamparm/maltrail/commits/71a226feef7ab11e0f2a7d65f104ae03931fe462sectoprat
https://api.github.com/repos/stamparm/maltrail/commits/160590381389f1ea471974f91fa7922634868a34ek_landupdate808
https://api.github.com/repos/stamparm/maltrail/commits/c3dc448549823d4a8cf4ff36543fbc56a84e699bapt_transparenttribe
https://x.com/skocherhan/status/2066130507427983633apt_transparenttribe
https://api.github.com/repos/stamparm/maltrail/commits/aa64bf15cdb2bb1ab4969fc4da2b7c0d6be7857fmora
https://x.com/Fact_Finder03/status/2066412486069571893mora
https://api.github.com/repos/stamparm/maltrail/commits/e0c5e9ec99305ee43cfb0ce23bf1c54bde9aa3baapt_sidewinder
https://x.com/volrant136/status/2066232019890426173apt_sidewinder
https://www.virustotal.com/gui/file/f5a7890fd09909711cd9aed1614f8f2687639c61f4ea26efb57100431a688f05/detectionapt_sidewinder

IP addresses 8

146.103.116.11sectoprat
2.24.131.246sectoprat
212.43.156.47sectoprat
46.151.26.137sectoprat
45.144.222.126mora
107.173.87.138cyberstrikeai
156.248.73.63cyberstrikeai
206.119.172.161cyberstrikeai

Community reviews

Loading reviews…