MalwarePublished 4 Mar 2026

tlp clear · Maltrail IOC for 2026-03-04

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

Description

Maltrail IOC for 2026-03-04

Impact

The impact is currently limited to awareness of potential malware-related network activity. No direct exploitation or vulnerability is described, and no active attacks have been confirmed. Without specific affected versions or exploit details, the immediate operational impact is low but warrants monitoring.

Defensive guidance

Organizations should incorporate this IOC into their threat detection and monitoring systems as appropriate. Since no active exploitation is known, no urgent action is required beyond standard monitoring.

Summary

The report details a malware-related IOC published on 2026-03-04 by the CIRCL OSINT Feed. It is classified as medium risk and relates to network activity observed externally. No specific affected software versions or detailed technical indicators are provided. There is no available patch or vendor fix, and no known active exploitation has been identified. The data is derived from manual collection and is intended for open sharing (tlp:clear).

Indicators of compromise

Domains 1,878

openclawskills.bestosx_atomic
openclawskills.coosx_atomic
openclawskills-795.pages.devosx_atomic
101-novatrust.click
101analyticscorex.click
101coreneural.digital
101futurequantum.digital
101strategypeak.pics
1factoryfocus.click
1vectorpulse.sbs

URLs 72

https://api.github.com/repos/stamparm/maltrail/commits/a0ad4e6eb667539e5e176f73733f9f35daa87a8bosx_atomic
https://x.com/r3dactt/status/2029038660709171317osx_atomic
https://www.virustotal.com/gui/file/f2cb9de40cb8b7e13e7d2b0b3e426f8503781a35d8bba3715395430e9b5eeb38/detectionosx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/c1fdba39a525c343150a2b822835c83385603f11remcos
https://x.com/__0XYC__/status/2029054494785298723remcos
https://www.virustotal.com/gui/file/e24293d1cd4fb69c6e3cbc709a55d2339df7349fba447de2b755da678bfb42fe/detectionremcos
https://api.github.com/repos/stamparm/maltrail/commits/e34d03760279b53c2b560fb8a64325957cc2a0aatsundere
https://api.github.com/repos/stamparm/maltrail/commits/55e59baf4ee4ac02ce5083ab1f778104b991af47
https://api.github.com/repos/stamparm/maltrail/commits/73b9a06d3de3ce16366205ede3f2c3d631d780d5ek_clearfake
https://api.github.com/repos/stamparm/maltrail/commits/034a79bad2400c8bdd37cfaeee2e00c380cf671bfakeapp

IP addresses 15

103.83.86.16remcos
91.238.50.174tsundere
117.24.4.124supershell_c2
151.241.154.247airbot
144.124.229.131sectoprat
193.24.123.61sectoprat
91.224.92.173sectoprat
138.124.50.249osx_generic
91.124.98.29quasarrat
103.131.131.39remcos

Community reviews

Loading reviews…