IOC Radar
TLP:WHITE140 IOCs

Maltrail IOC for 2026-07-24

CO
CIRCL OSINT Feed
Published July 24, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREfile-download.cloudnettbank-avida.lloydk…license.claude-pro.comCAPABILITYAsyncRATLummaPowerShell EmpireVICTIMunknown
Adversary
Infrastructure(6)
Capability(4)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise140

TypeIndicatorConfidenceScoreFirst Seen
Domainfile-download.cloud
loadermalwarenetwork
High
70
Jul 24, 26
SHA10640e815ac1915043e9b9c803b8cb09c4d5140cf
aptespionagefile-hash
High
70
Jul 24, 26
Domainnettbank-avida.lloydkhan.com
aptespionagemalware
High
70
Jul 24, 26
Domainlicense.claude-pro.com
aptespionagemalware
High
70
Jul 24, 26
Domainhgmydr.wiki
exploitmalwarenetwork
High
70
Jul 24, 26
Domainabangan.cyou
malwarenetworkrat
High
68
Jul 25, 26
SHA25667bbed4c71f93013910a8443fd92f4feb025ea44e7eba47e2f7afe84e3e8e830
aptespionagefile-hash
High
70
Jul 24, 26
Domainbarringer.click
malwarenetworkransomware
High
70
Jul 24, 26
SHA25615c25b66b6b88ab2950bf767040edd2e1e35b1787909b09f9a09aafcb17096e6
file-hashmalwarerat
High
68
Jul 25, 26
Domainjordan.tiefixy.com
malwarenetworkrat
High
68
Jul 25, 26
IP38.143.57.11
malwarenetworkrat
High
68
Jul 25, 26
Domainvertextrust-advisor.com
aptespionagemalware
High
70
Jul 24, 26
IP216.107.139.88
botnetmalwarenetwork
High
86
Jun 25, 26
Domainchoppyi.cyou
malwarenetworkrat
High
68
Jul 25, 26
Domain2026hoy.duckdns.org
malwarenetworkrat
High
68
Jul 25, 26
Domainfrogssilk.xyz
loadermalwarenetwork
High
70
Jul 24, 26
Domainclintonpqfg-adriance.workers.dev
malwarenetworkrat
High
68
Jul 25, 26
Domainshare-ya.shop
malwarenetworkransomware
High
70
Jul 24, 26
Domaindispute-resolutioncenter.com
malwarenetworkrat
High
78
Jul 22, 26
Domaingenuscr.cyou
malwarenetworkrat
High
68
Jul 25, 26
Domainbadoher-hotelrewiews.com
malwarenetworkrat
High
78
Jun 6, 26
Domainmail-fisheries-gov-bd.netlify.app
aptespionagemalware
High
68
Jul 25, 26
SHA145e66d723f168a9f5b856eae15f8c6e61efa7c89
file-hashmalwarerat
High
68
Jul 25, 26
SHA145f399de3b67ee86fd65d0d2e169b131746e0a7f
aptespionagefile-hash
High
68
Jul 25, 26
Domainshoesyarn.xyz
loadermalwarenetwork
High
70
Jul 24, 26
SHA2563c254614de8c1a2f213c526b0e5072d43ffeb7cc340d9a4a6ebaa16592b3bbe0
file-hashmalwarerat
High
68
Jul 25, 26
SHA256188bd4fc222c9615540884920caf37ea88bcbea7488e1fb98709e357dd096666
file-hashmalwarerat
High
86
Jul 25, 26
Domainxwe.us
malwarenetworkrat
High
70
Jul 24, 26
SHA13bbc58464018603b2c1e1ce4e18fedbfd767ea37
file-hashmalwarerat
High
68
Jul 25, 26
Domaingouvvbo.top
aptespionagemalware
High
70
Jul 24, 26
Domainbad-travelsreweies.com
malwarenetworkrat
High
78
Jun 6, 26
Domainamc-us.mprevive.com
malwarenetworkrat
High
68
Jul 25, 26
Domain9z.monitorondomainwintgt2.store
aptespionagemalware
High
70
Jul 24, 26
SHA2569dec582e808a71dc03c07e99898096c561427e4bf71cb9ecc03f3a2629ffef78
file-hashmalwarerat
High
68
Jul 25, 26
Domainportal-bzst-de.com
malwarenetworkrat
High
72
Jun 3, 26
SHA199d68342dcc8ca4974294846f4adadb1b28e9544
file-hashloadermalware
High
70
Jul 24, 26
Domainavida-nettbank-mycards.uabbros.com
malwarenetworkrat
High
70
Jul 24, 26
SHA1d30f5137f2fc4b2084c60fda5f1367e908df9a9c
file-hashmalwarerat
High
70
Jul 24, 26
Domainmyaccount-servicesonline.sbs
malwarenetworkrat
High
76
Jun 3, 26
SHA1d5f8b9ab003e2debc2f3fea0ea96c3e42ef62db0
aptespionagefile-hash
High
70
Jul 24, 26
Domainhali-secure.com
malwarenetworkrat
High
70
Jul 24, 26
SHA1acd259a780cd660811a322e6cf173b32a807ffe2
file-hashmalwarerat
High
68
Jul 25, 26
SHA18ee2efe4bcfe64bb5b6a4aea6c91e31ff8781071
file-hashloadermalware
High
70
Jul 24, 26
Domainadmin.tiefixy.com
malwarenetworkrat
High
68
Jul 25, 26
SHA1f54d3d09bb71c22c39d23f7e7c9ee7a916884289
file-hashmalwarerat
High
68
Jul 25, 26
Domainqrs-knab.com
malwarenetworkrat
High
70
Jul 24, 26
Domainvertextrustadvisors.com
aptespionagemalware
High
70
Jul 24, 26
IP209.94.56.212
malwarenetworkrat
High
68
Jul 25, 26
IP185.39.207.39
malwarenetworkrat
High
70
Jul 24, 26
Domainbeechea.cyou
malwarenetworkrat
High
68
Jul 25, 26
Domainshare-ya.space
exploitmalwarenetwork
High
70
Jul 24, 26
IP8.217.190.58
aptespionageloader
High
70
Jul 24, 26
SHA256a09335aa9ea1a030ac39f1f39ee0dc0a916b1feddb45a677d241b2cc8f70bf01
c2file-hashmalware
High
70
Jul 24, 26
SHA1969b1cde1e40a03b95a2b601b4a5178b05e96056
file-hashmalwarerat
High
68
Jul 25, 26
Domainmonitorondomainwintgt.store
aptbotnetespionage
High
86
Jun 27, 26
SHA256d7cd9e7d257ca4180c1d33f3bcbf4d3df4388e6afe1618f09388641ec2f8ed9e
aptespionagefile-hash
High
68
Jul 25, 26
Domainzxzaq.com
malwarenetworkransomware
High
70
Jul 24, 26
SHA13ebfbde281f03138145d9059abdf5a31c57e5fad
file-hashmalwarerat
High
70
Jul 24, 26
IP172.86.126.18
abuseactive scanapt
High
83
Jun 18, 26
Domainfreedommobile5g-payments.com
malwarenetworkrat
High
76
Jun 3, 26
SHA16769e407bbd0c5df1dc9231e56a6a6192cb4df73
anonymizationfile-hashmalware
High
70
Jul 24, 26
Domaintiefixy.com
malwarenetworkrat
High
68
Jul 25, 26
IP173.225.99.250
aptbotnetespionage
High
86
Jul 21, 26
Domainhotel-guestbadrewies.com
malwarenetworkrat
High
78
Jun 6, 26
Domainis-01-ast.ols-img-12.workers.dev
indicatormalwarenetwork
High
60
Jul 23, 26
SHA1719823a3cc9278d445f043b3f8147f098e3df0dc
file-hashmalwareransomware
High
70
Jul 24, 26
IP155.103.71.115
aptbotnetespionage
High
86
Jun 2, 26
Domaindemo.tiefixy.com
malwarenetworkrat
High
68
Jul 25, 26
SHA25631de616a683a4af7a3f711f29243426dda5eabcacdf7879203a8d3fbb1a808f6
file-hashmalwarerat
High
68
Jul 25, 26
Domaindossiiggnn.com
malwarenetworkrat
High
70
Jul 24, 26
Domainqbo-suppot-center.com
malwarenetworkproxy
High
72
Jun 3, 26
IP51.146.240.219
malwarenetworkrat
High
70
Jul 18, 26
SHA106d838b8b96c095ee1ddc6de3e3a7f02936fb734
aptespionageexploit
High
70
Jul 24, 26
Domainlloydkhan.com
malwarenetworkrat
High
70
Jul 24, 26
Domaincdn.clintonpqfg-adriance.workers.dev
malwarenetworkrat
High
68
Jul 25, 26
Domainupsinf.com
malwarenetworkrat
High
70
Jul 24, 26
Domainbad-travelrewiese.com
malwarenetworkrat
High
78
Jun 6, 26
Domainmgmntconsole-page.com
malwarenetworkrat
High
78
Jun 6, 26
SHA1e1bb3cf9f1aa6813529672951178c00345158164
aptespionagefile-hash
High
70
Jul 24, 26
Domainnspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion
anonymizationmalwarenetwork
High
70
Jul 24, 26
Domainupdate-crowdstrike.com
aptespionagemalware
High
70
Jul 24, 26
SHA137a375cadfa9e38bb99f96189b7351c648a644ae
aptespionagefile-hash
High
70
Jul 24, 26
Domainsecure-insurance2.com
malwarenetworkrat
High
72
Jun 3, 26
Domainresolution-center-dispute-review.com
malwarenetworkrat
High
74
Jul 22, 26
Domainstandardiomlivechat.com
loadermalwarenetwork
High
70
Jul 24, 26
SHA1ba0e3be8e59896984d5dac422ce5ebb5895bfc3a
file-hashmalwarerat
High
68
Jul 25, 26
Domain8a.monitorondomainlintgt.store
aptespionagemalware
High
70
Jul 24, 26
Domainministergiants.xyz
loadermalwarenetwork
High
70
Jul 24, 26
SHA1bdfb8db1b4f474acf51fc458ae8e75a794169acf
file-hashmalwareransomware
High
70
Jul 24, 26
SHA256bc407097ee137184b145516a4830a3a3b768dedf4fb1b8b4a2ad548b4b20d55a
file-hashmalwarerat
High
86
Jul 24, 26
Domainstage-fashion365.vercel.app
exploitmalwarenetwork
High
68
Jul 25, 26
Domainadbeinstallergeneral.sbs
aptespionagemalware
High
70
Jul 24, 26
Domainaeshire.click
loadermalwarenetwork
High
70
Jul 24, 26
Domainols-img-12.workers.dev
malwarenetworkransomware
High
70
Jul 24, 26
Domainupdate-sentinelone.com
aptespionagemalware
High
70
Jul 24, 26
SHA2563d43d9f3c0c89a1b810f655bdb199eaeb8c806059187157a45edf0504459b964
file-hashmalwarerat
High
68
Jul 25, 26
SHA14a97bc5dcf506c51373bf1d5877b099ab64065f5
file-hashloadermalware
High
70
Jul 24, 26
SHA1accf0cc04c3894df22c2524ec7d65b8740e305e1
aptespionagefile-hash
High
70
Jul 24, 26
IP64.89.161.173
malwarenetworkproxy
High
68
Jul 25, 26
Domainvitrinedasabedoria.com.br
aptespionagemalware
High
70
Jul 24, 26
Domainlloyd-secure.com
malwarenetworkrat
High
70
Jul 24, 26
Domainclaude-pro.com
aptespionageloader
High
70
Jul 24, 26
Domainmonitorondomainlintgt.store
aptespionagemalware
High
70
Jul 24, 26
Domaindeckerh.cyou
malwarenetworkrat
High
68
Jul 25, 26
Domainenvioasy24.kozow.com
malwarenetworkrat
High
68
Jul 25, 26
Domainupgybj.store
exploitmalwarenetwork
High
70
Jul 24, 26
Domainsquirrelsecretary.cfd
loadermalwarenetwork
High
70
Jul 24, 26
Domainarusupport-region1-webhook.online
exploitmalwarenetwork
High
68
Jul 25, 26
Domainadmln.mgmnt-consoletab.com
malwarenetworkrat
High
74
Jun 6, 26
SHA141850713a3c595f5282db2a2af7f75452bee45c9
aptespionagefile-hash
High
70
Jul 24, 26
Domainbrebe01.duckdns.org
malwarenetworkrat
High
68
Jul 25, 26
IP43.106.71.28
aptespionageindicator
Medium
55
Apr 14, 26
Domainformulier-herkenning-2026.com
malwarenetworkrat
High
70
Jul 24, 26
Domain511mon.kozow.com
malwarenetworkrat
High
68
Jul 25, 26
SHA25632e4019d148109dc2f4fd04f2e1207b902ffe0dcdaae4b7118fc8fc8c6ca62ef
file-hashmalwarerat
High
68
Jul 25, 26
Domainsupportaru.serveftp.com
exploitmalwarenetwork
High
68
Jul 25, 26
Domainmprevive.com
malwarenetworkrat
High
68
Jul 25, 26
Domainencephw.cyou
malwarenetworkrat
High
68
Jul 25, 26
SHA19e94b62d6c63de21c9e7f390665b700d6b8e977d
file-hashmalwarerat
High
68
Jul 25, 26
Domainsacaroncha.duckdns.org
malwarenetworkrat
High
68
Jul 25, 26
SHA2568069dc3a01b238d5506448abd7cddb3a7c583b81b209e516481b2923aac90782
file-hashmalwarerat
High
68
Jul 25, 26
IP45.137.10.110
malwarenetworkproxy
High
68
Jul 25, 26
SHA1d1bd426c872dbafeba5c73dcb871b08b338299bc
file-hashmalwarerat
High
68
Jul 25, 26
Domaininfo-ups.com
malwarenetworkrat
High
70
Jul 24, 26
Domainvertextrust-advisors.com
aptespionagemalware
High
70
Jul 24, 26
Domainmatchny.cyou
malwarenetworkrat
High
68
Jul 25, 26
SHA17d4e236cea52c6946b3eee702043666cfa37cc3f
aptespionagefile-hash
High
68
Jul 25, 26
Domaindispute-resolution.support
malwarenetworkrat
High
78
Jul 22, 26
Domaingstatic-analysis.beijing-cn1.oo0.be
malwarenetworkrat
High
68
Jul 25, 26
Domaindesexur.cyou
malwarenetworkrat
High
68
Jul 25, 26
Domainxsza.net
malwarenetworkrat
High
70
Jul 24, 26
Domainshare-ya.top
aptespionagemalware
High
70
Jul 24, 26
Domaintalkhome.space
loadermalwarenetwork
High
70
Jul 24, 26
SHA1c342a8a5af2d92f287c724efbca6b726013da8d0
c2file-hashmalware
High
70
Jul 24, 26
SHA256451b586ec9d3c997b319986a1177829653e8ae641c953c05ede6a38616f2da97
botnetexploitfile-hash
High
86
Jul 25, 26
Domainaccescportcent.cfd
aptespionagemalware
High
70
Jul 24, 26
Domainbadotherhstays.com
malwarenetworkrat
High
76
Jun 3, 26
URLhttps://blog.defentive.com/the-phantom-threat-inside-unc5518s-invisible-empire-of-metastealer-operations-defentive-3c05359dcae0
c2malwarenetwork
High
70
Jul 24, 26
SHA1beb88539f012038c512a195dc583b15465a95b8e
file-hashmalwareransomware
High
70
Jul 24, 26
Domainmonitorondomainwintgt2.store
aptespionagemalware
High
70
Jul 24, 26

IOC Relationship Graph

IOC Relationship Graph140 total IOCs
DomainSHA1SHA256IPURL
Domain87SHA127SHA25613IP12URL1Malware4REPORTMaltrail IOC for 2026-07-2AsyncRATLummaPowerShell EmpireRemcos
scroll to zoom · drag to pan · click IOC to open