Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

Maltrail IOC for 2026-07-06

0
Medium
Published: 07/05/2026 (07/05/2026, 00:00:00 UTC)
Source: CIRCL OSINT Feed

Description

Maltrail IOC for 2026-07-06

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/06/2026, 18:21:18 UTC

Technical Analysis

The report details a Maltrail IOC published on 2026-07-05 by CIRCL OSINT Feed, indicating observed malware-related network activity. It serves as an external analysis and observation event without specific technical indicators or affected software versions. No known exploits or patches exist, and the IOC is intended to support detection efforts rather than remediation.

Potential Impact

The impact is limited to detection and monitoring of malware-related network activity. There is no direct vulnerability or exploit described, so no direct system compromise or damage is indicated by this IOC alone.

Mitigation Recommendations

No patch or remediation is applicable as this is an IOC for detection purposes. Security teams should incorporate this IOC into their monitoring and detection systems to identify potential malicious network activity. No urgent action is required beyond standard threat intelligence integration.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Uuid
f7b99d14-f07f-41b5-b9bf-13e59b152219
Original Timestamp
1783360806

Indicators of Compromise

Url

ValueDescriptionCopy
urlhttps://api.github.com/repos/stamparm/maltrail/commits/d8f3ffacdb7f7f24a0321a33ddb564e430c9b568
cyberstrikeai
urlhttps://api.github.com/repos/stamparm/maltrail/commits/df9339ad250f17339613e3818d811f826c4b0b59
cyberstrikeai
urlhttps://api.github.com/repos/stamparm/maltrail/commits/bf64ecc21f66123f9bab1ba01e425380d0cf2cd1
apt_lazarus
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8b155cdb724d1602c7913ea4d9a3757ddf2f8025
busysnake
urlhttps://api.github.com/repos/stamparm/maltrail/commits/e71775028bd5a2d9926c2860ca05f92f36f31a60
busysnake
urlhttps://securelist.com/tr/armored-likho-apt-with-busysnake-stealer/120292
busysnake
urlhttps://api.github.com/repos/stamparm/maltrail/commits/63dfb9d67911c61772599aa7cf033a4f65b96d33
apt_lazarus
urlhttps://x.com/skocherhan/status/2074059180256739719
apt_lazarus
urlhttps://api.github.com/repos/stamparm/maltrail/commits/4c873a75cb9e372c9210d97bdcb6ca26101a0c56
banload
urlhttps://api.github.com/repos/stamparm/maltrail/commits/6890498cdb2c30188d17c2b8a71ef2e2b357a12b
busysnake
urlhttps://api.github.com/repos/stamparm/maltrail/commits/6f4a72b300ce1d2e6e332dfa25295e590f0d9840
quasarrat
urlhttps://x.com/smica83/status/2074069873185984543
quasarrat
urlhttps://tria.ge/260706-lymq3ads5w/behavioral1
quasarrat
urlhttps://api.github.com/repos/stamparm/maltrail/commits/c466cc9ac2b467aa78580857a3764226ef2cf8ad
generic
urlhttps://x.com/malwrhunterteam/status/2074064422528569777
generic
urlhttps://api.github.com/repos/stamparm/maltrail/commits/dc4d5252ab104a7e125a12cad60810d55a08d57c
powershell_injector
urlhttps://x.com/malwrhunterteam/status/2074061492094140456
powershell_injector
urlhttps://api.github.com/repos/stamparm/maltrail/commits/2371d9c5def5859725e73736d6cf4bc47e84b430
silverfox
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8cc7f918fdb78a37568b31c8e30991445ebb33f2
silverfox
urlhttps://api.github.com/repos/stamparm/maltrail/commits/60007018a83362ee4dae4581ddec34f58584337e
silverfox
urlhttps://api.github.com/repos/stamparm/maltrail/commits/654427f07306f56880e7d6bfcf81be7ed616491e
apt_kimsuky
urlhttps://api.github.com/repos/stamparm/maltrail/commits/0a89216ff0b42c53a6e368ea8b4f1e74eee407e1
android_bankbot
urlhttps://api.github.com/repos/stamparm/maltrail/commits/72590c5de4cca5f6c65d5c33a9f0aed88ee1c586
android_bankbot
urlhttps://x.com/d1v35hresearch/status/2074093717527691433
android_bankbot
urlhttps://www.virustotal.com/gui/file/e3db88aed58aefee024169a5678cbfb0ea0b0c1fcaf0d4f77419e7655904558a/detection
android_bankbot

Ip

ValueDescriptionCopy
ip101.34.206.165
cyberstrikeai
ip178.107.169.28
cyberstrikeai
ip135.236.106.190
cyberstrikeai
ip154.9.255.236
cyberstrikeai
ip161.33.184.234
cyberstrikeai
ip38.76.188.8
cyberstrikeai
ip95.216.64.240
apt_lazarus
ip144.208.127.165
apt_lazarus
ip158.160.75.185
quasarrat
ip192.142.51.51
powershell_injector

Domain

ValueDescriptionCopy
domainapp.vereoy.com
apt_lazarus
domaincameradriverupdates.com
apt_lazarus
domainpaxos-apply.com
apt_lazarus
domainvereoy.com
apt_lazarus
domainaxilvles.online
busysnake
domaindedviking.xyz
busysnake
domainfotorella.store
busysnake
domainholdus.space
busysnake
domainkozackii.online
busysnake
domainmans13lvl.xyz
busysnake
domainmargarinka.xyz
busysnake
domainnashrodnoi.xyz
busysnake
domainsvetanet.store
busysnake
domainvelikolepniykot.cfd
busysnake
domainvorkmachine.store
busysnake
domainwtfprogram.store
busysnake
domainarvax.xyz
busysnake
domaincashtiger.online
busysnake
domaingrked.online
busysnake
domainindusrummy.in
busysnake
domainlvl99.store
busysnake
domainndrt.ink
busysnake
domainonetoken.ink
busysnake
domainribka.online
busysnake
domainvarenie.live
busysnake
domainwinupdate.ink
busysnake
domainwinupdate.live
busysnake
domainadmin.cashtiger.online
busysnake
domainmyboard.chickenkiller.com
busysnake
domainmyboard.twilightparadox.com
busysnake
domainknockri.us
apt_lazarus
domainalfatransportes.site
banload
domainapp-coinhouses.com
banload
domainatualizanonavegador.com
banload
domaincanaisonline.lat
banload
domainconsultenotafiscal.lat
banload
domaind4-documentacion.lat
banload
domaindocumentacion.lat
banload
domainemissaofiscal.com
banload
domainma-pdffiller.lat
banload
domainmettreajouredf.com
banload
domainnfe-online.com
banload
domainnfiscais.com
banload
domainplantcures.it.com
banload
domainpremiosdavisacopa.com
banload
domainsarhartu.com
banload
domainste-pdffiller.lat
banload
domainsunat.lat
banload
domaintransalfa.online
banload
domaintrusted-connection.com
banload
domainvizualizardocpdf.online
banload
domainvizualizardocumentopdf.online
banload
domainwolterskluwer.lat
banload
domain2026.blue
busysnake
domainauthlock.top
busysnake
domaincamfusion.top
busysnake
domaindamiantpv.online
busysnake
domainforgecheats.store
busysnake
domainfunsytribe.cloud
busysnake
domainlenagallery.art
busysnake
domainpriced-broadway-reform-gene.trycloudflare.com
generic
domainzusyyredrs.love
silverfox
domainamvcoins.vip
silverfox
domainbetooo.vip
silverfox
domaincovliinada.us.cc
silverfox
domaindgdskfds.uk.cc
silverfox
domaindhnsdhmskl.uk.cc
silverfox
domainfanghong.xin
silverfox
domainfzdoor.vip
silverfox
domaingfmqvip.vip
silverfox
domaingool.goole.email
silverfox
domaingoole.email
silverfox
domaingov2.xin
silverfox
domaingoviinada.us.cc
silverfox
domaingovinada.us.cc
silverfox
domaingovliinada.us.cc
silverfox
domaingovs.qpon
silverfox
domaingovs.top
silverfox
domainguotoujgvip.vip
silverfox
domainimg.goole.email
silverfox
domainindiaaba.com
silverfox
domainindiasdfds.uk.cc
silverfox
domainindiaxyne.us.cc
silverfox
domainindiaxyqe.us.cc
silverfox
domainindiaxyre.us.cc
silverfox
domainindiaxyte.us.cc
silverfox
domainindiaxyzac.us.cc
silverfox
domainindiaxyzbc.us.cc
silverfox
domainindiaxyze.us.cc
silverfox
domainindiaxyzq.bond
silverfox
domainindiaxyzq.sbs
silverfox
domainindiaxyzq.us.cc
silverfox
domainindiaxyzqa.us.cc
silverfox
domainindiaxyzqaq.us.cc
silverfox
domainindiaxyzqc.us.cc
silverfox
domainindiaxyzqd.us.cc
silverfox
domainindiaxyzqx.us.cc
silverfox
domainjinmai.vip
silverfox
domainkiafewoey.icu
silverfox
domainnnnwin.vip
silverfox
domainsgeshex.vip
silverfox
domainsuiyerjser.cyou
silverfox
domainuydsecbjyge.cyou
silverfox
domainweb.amvcoins.vip
silverfox
domainbzusdty.live
silverfox
domaincksxmviu.love
silverfox
domaincnxvbsjdy.live
silverfox
domainfdcmsjrsw.live
silverfox
domainfuavyexr.love
silverfox
domainfxuawyje.love
silverfox
domainfychdstjse.live
silverfox
domaingxncjsuefre.live
silverfox
domainhsawtse.eu.cc
silverfox
domainhsiueteas.live
silverfox
domainhsncjdyea.live
silverfox
domainisyawtgxe.love
silverfox
domainjaiehsycres.live
silverfox
domainjdfksyaw.live
silverfox
domainkaiwyrey.eu.cc
silverfox
domainkakiwuyder.live
silverfox
domainkasiemmu.love
silverfox
domainkcetbftaw.love
silverfox
domainkncjxdhyers.live
silverfox
domainksauwerd.love
silverfox
domainkxjnbsagt.live
silverfox
domainlaiwyfbtw.live
silverfox
domainlasdyyterc.live
silverfox
domainlckawybdy.live
silverfox
domainlcvajwyt.love
silverfox
domainlicduytrdse.live
silverfox
domainlodiisuede.live
silverfox
domainmckajwyd.live
silverfox
domainmxodsiuuy.live
silverfox
domainmxshteaye.love
silverfox
domainmxziyuve.live
silverfox
domainnsisuyete.live
silverfox
domainnxhsuscy.love
silverfox
domainnxjdfysead.live
silverfox
domainnzsjdyzw.live
silverfox
domainpsiawute.eu.cc
silverfox
domainqaywtfse.eu.cc
silverfox
domainqicxgreae.live
silverfox
domainqisdyetvcae.live
silverfox
domainqmcsjeus.live
silverfox
domainqodyeytax.live
silverfox
domainqxcddrse.live
silverfox
domainscytatyweg.live
silverfox
domainsuawytde.eu.cc
silverfox
domaintawdnasew.love
silverfox
domaintsbwufyrsw.live
silverfox
domainvnbhaytysw.live
silverfox
domainvxiduyga.live
silverfox
domainxbgsetewt.live
silverfox
domainxciwuerse.eu.cc
silverfox
domainxcxkdkuayx.live
silverfox
domainxhastyese.love
silverfox
domainxiawytee.love
silverfox
domainxstvchfhd.live
silverfox
domainxuaidjay.live
silverfox
domainxuaytedgv.live
silverfox
domainzdtrebdhr.live
silverfox
domainzsyxmyur.live
silverfox
domainzxcjyeahd.live
silverfox
domainzxysevre.eu.cc
silverfox
domainzzisudted.live
silverfox
domainzziyyterser.live
silverfox
domaindispsendsvcs.dynu.net
apt_kimsuky
domainedocs-kaka.dynu.net
apt_kimsuky
domainmidsance.dynu.org
apt_kimsuky
domainmsdnsmye.dynu.org
apt_kimsuky
domainnhiseos.dynu.org
apt_kimsuky
domainsandmsid.dynu.org
apt_kimsuky
domainsidnance.dynu.org
apt_kimsuky
domaindichcxosghnd-dsvekdc.top
android_bankbot
domaindinhdanhdientulltp.com
android_bankbot
domaindripshopiuien.com
android_bankbot
domaindvc-vn-dichvucong.com
android_bankbot
domainmobietax-dvc.com
android_bankbot
domainpaajaaks.com
android_bankbot
domainvnvssid-byt.top
android_bankbot
domainvnvssid-byt.vip
android_bankbot
domainvn-dichvucong.com
android_bankbot

Threat ID: 6a4bf21927e9c79719f8a1a3

Added to database: 07/06/2026, 18:21:13 UTC

Last enriched: 07/06/2026, 18:21:18 UTC

Last updated: 07/06/2026, 20:51:13 UTC

Views: 7

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

External Links

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses