Maltrail IOC for 2026-07-06
Maltrail IOC for 2026-07-06
AI Analysis
Technical Summary
The report details a Maltrail IOC published on 2026-07-05 by CIRCL OSINT Feed, indicating observed malware-related network activity. It serves as an external analysis and observation event without specific technical indicators or affected software versions. No known exploits or patches exist, and the IOC is intended to support detection efforts rather than remediation.
Potential Impact
The impact is limited to detection and monitoring of malware-related network activity. There is no direct vulnerability or exploit described, so no direct system compromise or damage is indicated by this IOC alone.
Mitigation Recommendations
No patch or remediation is applicable as this is an IOC for detection purposes. Security teams should incorporate this IOC into their monitoring and detection systems to identify potential malicious network activity. No urgent action is required beyond standard threat intelligence integration.
Indicators of Compromise
- url: https://api.github.com/repos/stamparm/maltrail/commits/d8f3ffacdb7f7f24a0321a33ddb564e430c9b568
- ip: 101.34.206.165
- ip: 178.107.169.28
- url: https://api.github.com/repos/stamparm/maltrail/commits/df9339ad250f17339613e3818d811f826c4b0b59
- ip: 135.236.106.190
- ip: 154.9.255.236
- ip: 161.33.184.234
- ip: 38.76.188.8
- url: https://api.github.com/repos/stamparm/maltrail/commits/bf64ecc21f66123f9bab1ba01e425380d0cf2cd1
- ip: 95.216.64.240
- ip: 144.208.127.165
- domain: app.vereoy.com
- domain: cameradriverupdates.com
- domain: paxos-apply.com
- domain: vereoy.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/8b155cdb724d1602c7913ea4d9a3757ddf2f8025
- domain: axilvles.online
- domain: dedviking.xyz
- domain: fotorella.store
- domain: holdus.space
- domain: kozackii.online
- domain: mans13lvl.xyz
- domain: margarinka.xyz
- domain: nashrodnoi.xyz
- domain: svetanet.store
- domain: velikolepniykot.cfd
- domain: vorkmachine.store
- domain: wtfprogram.store
- url: https://api.github.com/repos/stamparm/maltrail/commits/e71775028bd5a2d9926c2860ca05f92f36f31a60
- url: https://securelist.com/tr/armored-likho-apt-with-busysnake-stealer/120292
- domain: arvax.xyz
- domain: cashtiger.online
- domain: grked.online
- domain: indusrummy.in
- domain: lvl99.store
- domain: ndrt.ink
- domain: onetoken.ink
- domain: ribka.online
- domain: varenie.live
- domain: winupdate.ink
- domain: winupdate.live
- domain: admin.cashtiger.online
- domain: myboard.chickenkiller.com
- domain: myboard.twilightparadox.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/63dfb9d67911c61772599aa7cf033a4f65b96d33
- url: https://x.com/skocherhan/status/2074059180256739719
- domain: knockri.us
- url: https://api.github.com/repos/stamparm/maltrail/commits/4c873a75cb9e372c9210d97bdcb6ca26101a0c56
- domain: alfatransportes.site
- domain: app-coinhouses.com
- domain: atualizanonavegador.com
- domain: canaisonline.lat
- domain: consultenotafiscal.lat
- domain: d4-documentacion.lat
- domain: documentacion.lat
- domain: emissaofiscal.com
- domain: ma-pdffiller.lat
- domain: mettreajouredf.com
- domain: nfe-online.com
- domain: nfiscais.com
- domain: plantcures.it.com
- domain: premiosdavisacopa.com
- domain: sarhartu.com
- domain: ste-pdffiller.lat
- domain: sunat.lat
- domain: transalfa.online
- domain: trusted-connection.com
- domain: vizualizardocpdf.online
- domain: vizualizardocumentopdf.online
- domain: wolterskluwer.lat
- url: https://api.github.com/repos/stamparm/maltrail/commits/6890498cdb2c30188d17c2b8a71ef2e2b357a12b
- domain: 2026.blue
- domain: authlock.top
- domain: camfusion.top
- domain: damiantpv.online
- domain: forgecheats.store
- domain: funsytribe.cloud
- domain: lenagallery.art
- url: https://api.github.com/repos/stamparm/maltrail/commits/6f4a72b300ce1d2e6e332dfa25295e590f0d9840
- url: https://x.com/smica83/status/2074069873185984543
- url: https://tria.ge/260706-lymq3ads5w/behavioral1
- ip: 158.160.75.185
- url: https://api.github.com/repos/stamparm/maltrail/commits/c466cc9ac2b467aa78580857a3764226ef2cf8ad
- url: https://x.com/malwrhunterteam/status/2074064422528569777
- domain: priced-broadway-reform-gene.trycloudflare.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/dc4d5252ab104a7e125a12cad60810d55a08d57c
- url: https://x.com/malwrhunterteam/status/2074061492094140456
- ip: 192.142.51.51
- url: https://api.github.com/repos/stamparm/maltrail/commits/2371d9c5def5859725e73736d6cf4bc47e84b430
- domain: zusyyredrs.love
- url: https://api.github.com/repos/stamparm/maltrail/commits/8cc7f918fdb78a37568b31c8e30991445ebb33f2
- domain: amvcoins.vip
- domain: betooo.vip
- domain: covliinada.us.cc
- domain: dgdskfds.uk.cc
- domain: dhnsdhmskl.uk.cc
- domain: fanghong.xin
- domain: fzdoor.vip
- domain: gfmqvip.vip
- domain: gool.goole.email
- domain: goole.email
- domain: gov2.xin
- domain: goviinada.us.cc
- domain: govinada.us.cc
- domain: govliinada.us.cc
- domain: govs.qpon
- domain: govs.top
- domain: guotoujgvip.vip
- domain: img.goole.email
- domain: indiaaba.com
- domain: indiasdfds.uk.cc
- domain: indiaxyne.us.cc
- domain: indiaxyqe.us.cc
- domain: indiaxyre.us.cc
- domain: indiaxyte.us.cc
- domain: indiaxyzac.us.cc
- domain: indiaxyzbc.us.cc
- domain: indiaxyze.us.cc
- domain: indiaxyzq.bond
- domain: indiaxyzq.sbs
- domain: indiaxyzq.us.cc
- domain: indiaxyzqa.us.cc
- domain: indiaxyzqaq.us.cc
- domain: indiaxyzqc.us.cc
- domain: indiaxyzqd.us.cc
- domain: indiaxyzqx.us.cc
- domain: jinmai.vip
- domain: kiafewoey.icu
- domain: nnnwin.vip
- domain: sgeshex.vip
- domain: suiyerjser.cyou
- domain: uydsecbjyge.cyou
- domain: web.amvcoins.vip
- url: https://api.github.com/repos/stamparm/maltrail/commits/60007018a83362ee4dae4581ddec34f58584337e
- domain: bzusdty.live
- domain: cksxmviu.love
- domain: cnxvbsjdy.live
- domain: fdcmsjrsw.live
- domain: fuavyexr.love
- domain: fxuawyje.love
- domain: fychdstjse.live
- domain: gxncjsuefre.live
- domain: hsawtse.eu.cc
- domain: hsiueteas.live
- domain: hsncjdyea.live
- domain: isyawtgxe.love
- domain: jaiehsycres.live
- domain: jdfksyaw.live
- domain: kaiwyrey.eu.cc
- domain: kakiwuyder.live
- domain: kasiemmu.love
- domain: kcetbftaw.love
- domain: kncjxdhyers.live
- domain: ksauwerd.love
- domain: kxjnbsagt.live
- domain: laiwyfbtw.live
- domain: lasdyyterc.live
- domain: lckawybdy.live
- domain: lcvajwyt.love
- domain: licduytrdse.live
- domain: lodiisuede.live
- domain: mckajwyd.live
- domain: mxodsiuuy.live
- domain: mxshteaye.love
- domain: mxziyuve.live
- domain: nsisuyete.live
- domain: nxhsuscy.love
- domain: nxjdfysead.live
- domain: nzsjdyzw.live
- domain: psiawute.eu.cc
- domain: qaywtfse.eu.cc
- domain: qicxgreae.live
- domain: qisdyetvcae.live
- domain: qmcsjeus.live
- domain: qodyeytax.live
- domain: qxcddrse.live
- domain: scytatyweg.live
- domain: suawytde.eu.cc
- domain: tawdnasew.love
- domain: tsbwufyrsw.live
- domain: vnbhaytysw.live
- domain: vxiduyga.live
- domain: xbgsetewt.live
- domain: xciwuerse.eu.cc
- domain: xcxkdkuayx.live
- domain: xhastyese.love
- domain: xiawytee.love
- domain: xstvchfhd.live
- domain: xuaidjay.live
- domain: xuaytedgv.live
- domain: zdtrebdhr.live
- domain: zsyxmyur.live
- domain: zxcjyeahd.live
- domain: zxysevre.eu.cc
- domain: zzisudted.live
- domain: zziyyterser.live
- url: https://api.github.com/repos/stamparm/maltrail/commits/654427f07306f56880e7d6bfcf81be7ed616491e
- domain: dispsendsvcs.dynu.net
- domain: edocs-kaka.dynu.net
- domain: midsance.dynu.org
- domain: msdnsmye.dynu.org
- domain: nhiseos.dynu.org
- domain: sandmsid.dynu.org
- domain: sidnance.dynu.org
- url: https://api.github.com/repos/stamparm/maltrail/commits/0a89216ff0b42c53a6e368ea8b4f1e74eee407e1
- domain: dichcxosghnd-dsvekdc.top
- domain: dinhdanhdientulltp.com
- domain: dripshopiuien.com
- domain: dvc-vn-dichvucong.com
- domain: mobietax-dvc.com
- domain: paajaaks.com
- domain: vnvssid-byt.top
- domain: vnvssid-byt.vip
- url: https://api.github.com/repos/stamparm/maltrail/commits/72590c5de4cca5f6c65d5c33a9f0aed88ee1c586
- url: https://x.com/d1v35hresearch/status/2074093717527691433
- url: https://www.virustotal.com/gui/file/e3db88aed58aefee024169a5678cbfb0ea0b0c1fcaf0d4f77419e7655904558a/detection
- domain: vn-dichvucong.com
Maltrail IOC for 2026-07-06
Description
Maltrail IOC for 2026-07-06
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The report details a Maltrail IOC published on 2026-07-05 by CIRCL OSINT Feed, indicating observed malware-related network activity. It serves as an external analysis and observation event without specific technical indicators or affected software versions. No known exploits or patches exist, and the IOC is intended to support detection efforts rather than remediation.
Potential Impact
The impact is limited to detection and monitoring of malware-related network activity. There is no direct vulnerability or exploit described, so no direct system compromise or damage is indicated by this IOC alone.
Mitigation Recommendations
No patch or remediation is applicable as this is an IOC for detection purposes. Security teams should incorporate this IOC into their monitoring and detection systems to identify potential malicious network activity. No urgent action is required beyond standard threat intelligence integration.
Technical Details
- Uuid
- f7b99d14-f07f-41b5-b9bf-13e59b152219
- Original Timestamp
- 1783360806
Indicators of Compromise
Url
| Value | Description | Copy |
|---|---|---|
urlhttps://api.github.com/repos/stamparm/maltrail/commits/d8f3ffacdb7f7f24a0321a33ddb564e430c9b568 | cyberstrikeai | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/df9339ad250f17339613e3818d811f826c4b0b59 | cyberstrikeai | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/bf64ecc21f66123f9bab1ba01e425380d0cf2cd1 | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8b155cdb724d1602c7913ea4d9a3757ddf2f8025 | busysnake | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/e71775028bd5a2d9926c2860ca05f92f36f31a60 | busysnake | |
urlhttps://securelist.com/tr/armored-likho-apt-with-busysnake-stealer/120292 | busysnake | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/63dfb9d67911c61772599aa7cf033a4f65b96d33 | apt_lazarus | |
urlhttps://x.com/skocherhan/status/2074059180256739719 | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/4c873a75cb9e372c9210d97bdcb6ca26101a0c56 | banload | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/6890498cdb2c30188d17c2b8a71ef2e2b357a12b | busysnake | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/6f4a72b300ce1d2e6e332dfa25295e590f0d9840 | quasarrat | |
urlhttps://x.com/smica83/status/2074069873185984543 | quasarrat | |
urlhttps://tria.ge/260706-lymq3ads5w/behavioral1 | quasarrat | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/c466cc9ac2b467aa78580857a3764226ef2cf8ad | generic | |
urlhttps://x.com/malwrhunterteam/status/2074064422528569777 | generic | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/dc4d5252ab104a7e125a12cad60810d55a08d57c | powershell_injector | |
urlhttps://x.com/malwrhunterteam/status/2074061492094140456 | powershell_injector | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/2371d9c5def5859725e73736d6cf4bc47e84b430 | silverfox | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8cc7f918fdb78a37568b31c8e30991445ebb33f2 | silverfox | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/60007018a83362ee4dae4581ddec34f58584337e | silverfox | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/654427f07306f56880e7d6bfcf81be7ed616491e | apt_kimsuky | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/0a89216ff0b42c53a6e368ea8b4f1e74eee407e1 | android_bankbot | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/72590c5de4cca5f6c65d5c33a9f0aed88ee1c586 | android_bankbot | |
urlhttps://x.com/d1v35hresearch/status/2074093717527691433 | android_bankbot | |
urlhttps://www.virustotal.com/gui/file/e3db88aed58aefee024169a5678cbfb0ea0b0c1fcaf0d4f77419e7655904558a/detection | android_bankbot |
Ip
| Value | Description | Copy |
|---|---|---|
ip101.34.206.165 | cyberstrikeai | |
ip178.107.169.28 | cyberstrikeai | |
ip135.236.106.190 | cyberstrikeai | |
ip154.9.255.236 | cyberstrikeai | |
ip161.33.184.234 | cyberstrikeai | |
ip38.76.188.8 | cyberstrikeai | |
ip95.216.64.240 | apt_lazarus | |
ip144.208.127.165 | apt_lazarus | |
ip158.160.75.185 | quasarrat | |
ip192.142.51.51 | powershell_injector |
Domain
| Value | Description | Copy |
|---|---|---|
domainapp.vereoy.com | apt_lazarus | |
domaincameradriverupdates.com | apt_lazarus | |
domainpaxos-apply.com | apt_lazarus | |
domainvereoy.com | apt_lazarus | |
domainaxilvles.online | busysnake | |
domaindedviking.xyz | busysnake | |
domainfotorella.store | busysnake | |
domainholdus.space | busysnake | |
domainkozackii.online | busysnake | |
domainmans13lvl.xyz | busysnake | |
domainmargarinka.xyz | busysnake | |
domainnashrodnoi.xyz | busysnake | |
domainsvetanet.store | busysnake | |
domainvelikolepniykot.cfd | busysnake | |
domainvorkmachine.store | busysnake | |
domainwtfprogram.store | busysnake | |
domainarvax.xyz | busysnake | |
domaincashtiger.online | busysnake | |
domaingrked.online | busysnake | |
domainindusrummy.in | busysnake | |
domainlvl99.store | busysnake | |
domainndrt.ink | busysnake | |
domainonetoken.ink | busysnake | |
domainribka.online | busysnake | |
domainvarenie.live | busysnake | |
domainwinupdate.ink | busysnake | |
domainwinupdate.live | busysnake | |
domainadmin.cashtiger.online | busysnake | |
domainmyboard.chickenkiller.com | busysnake | |
domainmyboard.twilightparadox.com | busysnake | |
domainknockri.us | apt_lazarus | |
domainalfatransportes.site | banload | |
domainapp-coinhouses.com | banload | |
domainatualizanonavegador.com | banload | |
domaincanaisonline.lat | banload | |
domainconsultenotafiscal.lat | banload | |
domaind4-documentacion.lat | banload | |
domaindocumentacion.lat | banload | |
domainemissaofiscal.com | banload | |
domainma-pdffiller.lat | banload | |
domainmettreajouredf.com | banload | |
domainnfe-online.com | banload | |
domainnfiscais.com | banload | |
domainplantcures.it.com | banload | |
domainpremiosdavisacopa.com | banload | |
domainsarhartu.com | banload | |
domainste-pdffiller.lat | banload | |
domainsunat.lat | banload | |
domaintransalfa.online | banload | |
domaintrusted-connection.com | banload | |
domainvizualizardocpdf.online | banload | |
domainvizualizardocumentopdf.online | banload | |
domainwolterskluwer.lat | banload | |
domain2026.blue | busysnake | |
domainauthlock.top | busysnake | |
domaincamfusion.top | busysnake | |
domaindamiantpv.online | busysnake | |
domainforgecheats.store | busysnake | |
domainfunsytribe.cloud | busysnake | |
domainlenagallery.art | busysnake | |
domainpriced-broadway-reform-gene.trycloudflare.com | generic | |
domainzusyyredrs.love | silverfox | |
domainamvcoins.vip | silverfox | |
domainbetooo.vip | silverfox | |
domaincovliinada.us.cc | silverfox | |
domaindgdskfds.uk.cc | silverfox | |
domaindhnsdhmskl.uk.cc | silverfox | |
domainfanghong.xin | silverfox | |
domainfzdoor.vip | silverfox | |
domaingfmqvip.vip | silverfox | |
domaingool.goole.email | silverfox | |
domaingoole.email | silverfox | |
domaingov2.xin | silverfox | |
domaingoviinada.us.cc | silverfox | |
domaingovinada.us.cc | silverfox | |
domaingovliinada.us.cc | silverfox | |
domaingovs.qpon | silverfox | |
domaingovs.top | silverfox | |
domainguotoujgvip.vip | silverfox | |
domainimg.goole.email | silverfox | |
domainindiaaba.com | silverfox | |
domainindiasdfds.uk.cc | silverfox | |
domainindiaxyne.us.cc | silverfox | |
domainindiaxyqe.us.cc | silverfox | |
domainindiaxyre.us.cc | silverfox | |
domainindiaxyte.us.cc | silverfox | |
domainindiaxyzac.us.cc | silverfox | |
domainindiaxyzbc.us.cc | silverfox | |
domainindiaxyze.us.cc | silverfox | |
domainindiaxyzq.bond | silverfox | |
domainindiaxyzq.sbs | silverfox | |
domainindiaxyzq.us.cc | silverfox | |
domainindiaxyzqa.us.cc | silverfox | |
domainindiaxyzqaq.us.cc | silverfox | |
domainindiaxyzqc.us.cc | silverfox | |
domainindiaxyzqd.us.cc | silverfox | |
domainindiaxyzqx.us.cc | silverfox | |
domainjinmai.vip | silverfox | |
domainkiafewoey.icu | silverfox | |
domainnnnwin.vip | silverfox | |
domainsgeshex.vip | silverfox | |
domainsuiyerjser.cyou | silverfox | |
domainuydsecbjyge.cyou | silverfox | |
domainweb.amvcoins.vip | silverfox | |
domainbzusdty.live | silverfox | |
domaincksxmviu.love | silverfox | |
domaincnxvbsjdy.live | silverfox | |
domainfdcmsjrsw.live | silverfox | |
domainfuavyexr.love | silverfox | |
domainfxuawyje.love | silverfox | |
domainfychdstjse.live | silverfox | |
domaingxncjsuefre.live | silverfox | |
domainhsawtse.eu.cc | silverfox | |
domainhsiueteas.live | silverfox | |
domainhsncjdyea.live | silverfox | |
domainisyawtgxe.love | silverfox | |
domainjaiehsycres.live | silverfox | |
domainjdfksyaw.live | silverfox | |
domainkaiwyrey.eu.cc | silverfox | |
domainkakiwuyder.live | silverfox | |
domainkasiemmu.love | silverfox | |
domainkcetbftaw.love | silverfox | |
domainkncjxdhyers.live | silverfox | |
domainksauwerd.love | silverfox | |
domainkxjnbsagt.live | silverfox | |
domainlaiwyfbtw.live | silverfox | |
domainlasdyyterc.live | silverfox | |
domainlckawybdy.live | silverfox | |
domainlcvajwyt.love | silverfox | |
domainlicduytrdse.live | silverfox | |
domainlodiisuede.live | silverfox | |
domainmckajwyd.live | silverfox | |
domainmxodsiuuy.live | silverfox | |
domainmxshteaye.love | silverfox | |
domainmxziyuve.live | silverfox | |
domainnsisuyete.live | silverfox | |
domainnxhsuscy.love | silverfox | |
domainnxjdfysead.live | silverfox | |
domainnzsjdyzw.live | silverfox | |
domainpsiawute.eu.cc | silverfox | |
domainqaywtfse.eu.cc | silverfox | |
domainqicxgreae.live | silverfox | |
domainqisdyetvcae.live | silverfox | |
domainqmcsjeus.live | silverfox | |
domainqodyeytax.live | silverfox | |
domainqxcddrse.live | silverfox | |
domainscytatyweg.live | silverfox | |
domainsuawytde.eu.cc | silverfox | |
domaintawdnasew.love | silverfox | |
domaintsbwufyrsw.live | silverfox | |
domainvnbhaytysw.live | silverfox | |
domainvxiduyga.live | silverfox | |
domainxbgsetewt.live | silverfox | |
domainxciwuerse.eu.cc | silverfox | |
domainxcxkdkuayx.live | silverfox | |
domainxhastyese.love | silverfox | |
domainxiawytee.love | silverfox | |
domainxstvchfhd.live | silverfox | |
domainxuaidjay.live | silverfox | |
domainxuaytedgv.live | silverfox | |
domainzdtrebdhr.live | silverfox | |
domainzsyxmyur.live | silverfox | |
domainzxcjyeahd.live | silverfox | |
domainzxysevre.eu.cc | silverfox | |
domainzzisudted.live | silverfox | |
domainzziyyterser.live | silverfox | |
domaindispsendsvcs.dynu.net | apt_kimsuky | |
domainedocs-kaka.dynu.net | apt_kimsuky | |
domainmidsance.dynu.org | apt_kimsuky | |
domainmsdnsmye.dynu.org | apt_kimsuky | |
domainnhiseos.dynu.org | apt_kimsuky | |
domainsandmsid.dynu.org | apt_kimsuky | |
domainsidnance.dynu.org | apt_kimsuky | |
domaindichcxosghnd-dsvekdc.top | android_bankbot | |
domaindinhdanhdientulltp.com | android_bankbot | |
domaindripshopiuien.com | android_bankbot | |
domaindvc-vn-dichvucong.com | android_bankbot | |
domainmobietax-dvc.com | android_bankbot | |
domainpaajaaks.com | android_bankbot | |
domainvnvssid-byt.top | android_bankbot | |
domainvnvssid-byt.vip | android_bankbot | |
domainvn-dichvucong.com | android_bankbot |
Threat ID: 6a4bf21927e9c79719f8a1a3
Added to database: 07/06/2026, 18:21:13 UTC
Last enriched: 07/06/2026, 18:21:18 UTC
Last updated: 07/06/2026, 20:51:13 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.