MalwarePublished 22 Jun 2026Updated 23 Jun 2026

Maltrail IOC for 2026-06-23

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Impact

The impact is limited to the presence of malware-related indicators that may be used to detect or block malicious activity. There is no direct evidence of exploitation or compromise detailed in this report. The threat level is medium, indicating a moderate risk based on observed malware activity and associated IOCs.

Defensive guidance

Security teams should use the provided indicators to update detection and prevention tools such as IDS/IPS, firewalls, and endpoint protection systems. Continuous monitoring for these IOCs and blocking or investigating related network activity is recommended. Patch status is not applicable.

Summary

The report provides a collection of malware-related indicators of compromise (IOCs) observed on 2026-06-23, including URLs to GitHub commits and VirusTotal detections, an IP address, and a suspicious domain. These IOCs are linked to malware families ConnectWise, AsyncRAT, and FakeApp. The data originates from the CIRCL OSINT Feed and serves as external network activity analysis. There is no information about exploitation techniques, vulnerabilities, or affected software versions. No known exploits in the wild or ransomware campaign associations are reported.

Indicators of compromise

Domains 1

fakeapp

get-service.store

URLs 6

https://api.github.com/repos/stamparm/maltrail/commits/11bd75d19a06a0d6925ca2cdef4a746f7619d52cconnectwise
https://www.virustotal.com/gui/file/becbfc36ee69db74b00a62dddd39e967e8434da292b07169c3c99648928dc14e/detectionconnectwise
https://api.github.com/repos/stamparm/maltrail/commits/0064c9815f262209f9d799d75f88f8b2a41d67aaasyncrat
https://www.virustotal.com/gui/file/b6990869d1a86bf94f784457493e521a06671bad00c03ee952996db4227e50b1/detectionasyncrat
https://api.github.com/repos/stamparm/maltrail/commits/b44661f112f10d446c4c52667db8adb044c39abafakeapp
https://x.com/malwrhunterteam/status/2069160888733462773fakeapp

IP addresses 1

connectwise

172.86.107.46

Community reviews

Loading reviews…