MalwarePublished 2 Mar 2026

Maltrail IOC for 2026-03-02

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Impact

The impact is limited to awareness of potential malware-related network activity. No direct exploitation or vulnerability is indicated, and no affected software versions or systems are specified. There is no evidence of active exploitation in the wild.

Defensive guidance

Security teams should incorporate this IOC into their threat detection and monitoring systems as appropriate but no urgent action is mandated by the vendor or source.

Summary

The provided data describes a malware-related IOC identified on 2026-03-02 by the CIRCL OSINT Feed. It is classified as a medium-risk observation of network activity without detailed technical indicators or affected software versions. There are no known exploits or patches associated with this IOC, and it serves as an informational alert within threat intelligence frameworks.

Indicators of compromise

Domains 158

adimagemarketing.complugx
anbusivam.complugx
basecampbox.complugx
buywownow.complugx
creatday.complugx
doorforum.coplugx
ecoafrique.netplugx
fruitbrat.complugx
gestationsdiabetes.complugx
hopelitellc.complugx

URLs 47

https://api.github.com/repos/stamparm/maltrail/commits/6abf2ca77127c15820535b87c0e19783a2ec4262sectoprat
https://api.github.com/repos/stamparm/maltrail/commits/f485d10ff02729e9f7b3b0f04305c271347450c8apt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/d6e73f30f2777a8ad6291998a119b57e5bbfc449plugx
https://cyberandramen.net/2026/03/02/before-the-proxy-uncovering-active-plugx-staging-infrastructure-linked-to-three-prc-actorsplugx
https://api.github.com/repos/stamparm/maltrail/commits/0d838114f6a39c38b74e80eb6c8143adeb4bf193
https://api.github.com/repos/stamparm/maltrail/commits/d89ed1cdff12d58bda88e4560c05ab2aff277016ek_clearfake
https://api.github.com/repos/stamparm/maltrail/commits/04cc04be52955c2b32613c96466bd63322a51b55supershell_c2
https://api.github.com/repos/stamparm/maltrail/commits/01e0914e85c0f326e1ff444a781ff812435e245afakeapp
https://api.github.com/repos/stamparm/maltrail/commits/e38959e4e2db329dc8319c3c92abaf02297a05ffandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/ebb03253bb60d473c3a4cecd840e28c84f8b74c3osx_atomic

IP addresses 27

212.34.134.3sectoprat
31.59.139.31sectoprat
5.178.96.160sectoprat
77.105.139.80sectoprat
89.124.74.114sectoprat
91.84.123.250sectoprat
91.92.243.101sectoprat
94.26.106.194sectoprat
216.250.252.103apt_lazarus
115.191.18.57supershell_c2

Community reviews

Loading reviews…