MalwarePublished
tlp clear · Maltrail IOC for 2026-03-03
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-03-03
Indicators of compromise
Domains 1,567
- view-mdoc.p-e.krapt_kimsuky
- service.view-mdoc.p-e.krapt_kimsuky
- police.service.view-mdoc.p-e.krapt_kimsuky
- nid.police.service.view-mdoc.p-e.krapt_kimsuky
- edoc.file.view.xnapt_kimsuky
- edoc.view.xnapt_kimsuky
- file.view.xnapt_kimsuky
- mid.edoc.view.xnapt_kimsuky
- nld.edoc.file.view.xnapt_kimsuky
- nood.xnapt_kimsuky
URLs 26
- https://api.github.com/repos/stamparm/maltrail/commits/5f30a571dca2c87679d47a1a2dc120f4aee0f553apt_kimsuky
- https://x.com/skocherhan/status/2028588428787433658apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/b8165602ecc2f948fc3eb114390140fe81119d28fakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/3bc027f71f68195f93f692ee9bc78b7f3816bc4alummac2
- https://api.github.com/repos/stamparm/maltrail/commits/48b3c661f27d839bf7e24590c9f6ff4d360df68fosx_atomic
- https://api.github.com/repos/stamparm/maltrail/commits/8f9a07e61682455c4f0ff4106f10a46f2e8ebbcfandroid_joker
- https://api.github.com/repos/stamparm/maltrail/commits/8d992372186a6ccfe7c1ef3d582a4a7566872329orcusrat
- https://x.com/1ZRR4H/status/2028598320420069763orcusrat
- https://www.virustotal.com/gui/file/c32932c7d7f18719a762cca23ba3ab6747c1953256084b24084a683382adac4a/detectionorcusrat
- https://www.virustotal.com/gui/file/2c125d61dbf28f7d03531665466ad8afa3056e402723c690329de4075531ce82/detectionorcusrat
IP addresses 13
- 91.92.240.197orcusrat
- 91.92.34.130generic
- 103.73.160.115generic
- 141.11.107.134generic
- 172.81.132.171generic
- 3.249.98.104generic
- 34.241.244.206generic
- 34.245.220.129generic
- 52.47.89.122generic
- 62.234.165.63generic
Community reviews
Loading reviews…