MalwarePublished 15 Jun 2026Updated 16 Jun 2026

Maltrail IOC for 2026-06-16

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

This entry reports a Maltrail Indicator of Compromise (IOC) dated 2026-06-16 related to malware activity observed through network monitoring. It is an OSINT observation from the CIRCL OSINT Feed with a medium risk level. No specific affected software versions or detailed technical indicators are provided. No known exploits or patches are associated with this IOC.

Impact

The impact is limited to the detection of malware-related network activity as an IOC. There is no information on exploitation, affected systems, or direct consequences beyond the presence of suspicious or malicious network indicators.

Defensive guidance

Security teams should incorporate this IOC into their detection and monitoring tools as appropriate. No urgent action is indicated by the source.

Summary

The report details a malware-related IOC detected by Maltrail on 2026-06-16, sourced from the CIRCL OSINT Feed. It is categorized as an external network activity observation without specific affected software or vulnerabilities. No exploit activity or remediation options are documented.

Indicators of compromise

Domains 187

qualquernomepow.onlinewarbyrat
exchange24app.cfdandroid_bankbot
echelon36solutions.click
meridian21resources.click
sentra2026management.click
keylogger-c2-panel.pages.devgeneric_stealer
steampowered.cc.cdgeneric_stealer
apartfocus.infoosx_nova
chronoconcake.shoposx_nova
marketcap-community.siteosx_nova

URLs 54

https://api.github.com/repos/stamparm/maltrail/commits/a949a99d7414a9cbf7de6ec0203d0f30014b34cfwarbyrat
https://x.com/Fact_Finder03/status/2066779322959196592warbyrat
https://api.github.com/repos/stamparm/maltrail/commits/0612d96c2b0c1f9aeaf8389a98a17180996a4f15android_bankbot
https://x.com/Fact_Finder03/status/2066770247907152329android_bankbot
https://api.github.com/repos/stamparm/maltrail/commits/155d2bf40e802b1a082add7dc41db6a3d072176a
https://api.github.com/repos/stamparm/maltrail/commits/de054c196c948951a2299d6f390247a3702d3a49generic_stealer
https://www.virustotal.com/gui/ip-address/104.21.2.27/relationsgeneric_stealer
https://api.github.com/repos/stamparm/maltrail/commits/d68575a40314bf9b87ff78de798c23ea25f05df1c2_panel
https://x.com/Fact_Finder03/status/2066761141737697504c2_panel
https://api.github.com/repos/stamparm/maltrail/commits/9b76d93ff6fc74d2ef6123773c2fc54d2962afddosx_nova

IP addresses 13

107.189.20.42android_bankbot
157.173.203.13c2_panel
185.130.45.201c2_panel
45.77.242.76apt_unclassified
209.14.84.37elf_mirai
146.70.233.83apt_unclassified
31.172.87.20apt_unclassified
5.255.127.55apt_unclassified
91.219.239.197connectwise
93.190.247.238sosihvncrat

Community reviews

Loading reviews…