MalwarePublished 9 Aug 2026Updated 10 Aug 2026

Maltrail IOC for 2026-08-10

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Impact

The impact is limited to the detection of potentially malicious network activity indicated by the IOC. There is no direct information on exploitation, affected systems, or damage caused. The medium severity rating suggests a moderate risk level based on the nature of the IOC.

Defensive guidance

Security teams should use this IOC to enhance detection capabilities within their network monitoring tools. Follow standard incident response procedures if the IOC is observed in your environment.

Indicators of compromise

Domains 483

185-242-3-106.cprapid.comcyberstrikeai
xioskins.comcyberstrikeai
canadafarmersbusinessnetwork.comapt_sandworm
hantangcapital.comapt_sandworm
soprasteria-local.comapt_sandworm
whantangcapital.comapt_sandworm
admin.hantangcapital.comapt_sandworm
assets.hantangcapital.comapt_sandworm
dev.hantangcapital.comapt_sandworm
frtgcwljktnews.m.hantangcapital.comapt_sandworm

URLs 6

https://api.github.com/repos/stamparm/maltrail/commits/d7af76c95d12f9d60189fcca91cfea9a997cb7aacyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/a3c505ea6565bb6dc227c95945e970ea7ea90103sectoprat
https://api.github.com/repos/stamparm/maltrail/commits/7b790b928a7ccebc43bd3e35d732bd93ff425a41apt_sandworm
https://api.github.com/repos/stamparm/maltrail/commits/e4986a3c6a82ecc99a0d4a93d149192eb7effc62apt_sandworm
https://cert.gov.ua/article/6318863apt_sandworm
https://api.github.com/repos/stamparm/maltrail/commits/7172960b605b31ba61386e94a756be1de712631dconnectwise

IP addresses 11

103.143.81.12cyberstrikeai
111.229.160.83cyberstrikeai
111.229.87.116cyberstrikeai
117.72.46.208cyberstrikeai
195.242.118.95cyberstrikeai
38.174.219.136cyberstrikeai
64.118.130.228cyberstrikeai
84.54.3.198cyberstrikeai
139.28.36.23apt_sandworm
104.194.133.88connectwise

Community reviews

Loading reviews…