IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE6 IOCs

APT36-Linked HACKERAI Implant Shows Signs of LLM-Assisted Malware Development

CP
Cyber Press
Published August 14, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT36INFRASTRUCTURE46.30.188.13appstoore.solutionsnic-support.siteCAPABILITYCobalt StrikeVICTIMunknown
Adversary(1)
Infrastructure(4)
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise6

TypeIndicatorConfidenceScoreFirst Seen
MD52fd38c2bcf482a3fbf577b75066e0177
aptespionageexploit
Medium
53
Aug 15, 26
IP46.30.188.13
intel-blogmalwarenetwork
High
58
Aug 15, 26
Domainappstoore.solutions
aptespionageintel-blog
High
69
Aug 14, 26
Domainnic-support.site
aptespionageexploit
High
69
Aug 14, 26
Domainafghantelecom.site
aptespionageintel-blog
High
69
Aug 14, 26
MD54d96a72e21626680fc3dd4198c883f2a
aptespionageexploit
Medium
53
Aug 15, 26

IOC Relationship Graph

IOC Relationship Graph6 total IOCs
MD5IPDomain
Domain3MD52IP1Actors1Malware1REPORTAPT36-Linked HACKERAI ImplAPT36Cobalt Strike
scroll to zoom · drag to pan · click IOC to open