MalwarePublished
tlp clear · Maltrail IOC for 2026-02-26
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-02-26
Indicators of compromise
Domains 369
- oficialrem.duckdns.orgremcos
- filecindercrate.com
- filedeltaforge.com
- filemodulelink.com
- filemonorailsync.com
- fileoriginvault.com
- filequartzrelay.com
- a.greetinggleeful.ruek_clearfake
- greetinggleeful.ruek_clearfake
- ns1.yyau.ruek_clearfake
URLs 16
- https://api.github.com/repos/stamparm/maltrail/commits/0c6667175dd9fba7698bbf1bdf849297b605a2e3remcos
- https://x.com/BlinkzSec/status/2026899651345993936remcos
- https://www.virustotal.com/gui/file/4f0c95a1885411100649bf8150c2f189dc0941ac569b801b3765d1ca64b760dc/detectionremcos
- https://api.github.com/repos/stamparm/maltrail/commits/437c2fe3871e35869bc9c67994edd7ce83f20427
- https://api.github.com/repos/stamparm/maltrail/commits/210c5c1185382eb070ddcbbee197d498b2870bceek_clearfake
- https://api.github.com/repos/stamparm/maltrail/commits/89ff2ed1d3a60e8ab5104cc8b6f398be6d6045aeek_clearfake
- https://api.github.com/repos/stamparm/maltrail/commits/6868b1d44903dc8d9bfda77b389aa5619994e003ek_clearfake
- https://api.github.com/repos/stamparm/maltrail/commits/e94a4d5b5a096f8f6c51332d0450e57a7a28061ahak5cloud_c2
- https://api.github.com/repos/stamparm/maltrail/commits/f826f1544f6464598ee6ccfd36bd3025314facdbfakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/6557113119e8effc165ced84096ccfe2b7d5fdfbsectoprat
IP addresses 2
- 186.169.75.221remcos
- 206.206.127.178sectoprat
Community reviews
Loading reviews…