MalwarePublished 7 Mar 2026

tlp clear · Maltrail IOC for 2026-03-07

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-07

Impact

No direct impact or exploitation evidence is provided. The IOC serves as a detection or monitoring reference rather than a vulnerability that can be patched or exploited. There is no indication of active attacks or compromised systems linked to this IOC.

Defensive guidance

Security teams should consider integrating this IOC into their detection and monitoring tools as part of threat intelligence enrichment. No urgent action is required based on this report alone.

Summary

The report describes a malware-related IOC collected manually and shared as part of an open-source intelligence feed. It is classified as medium risk but does not provide detailed technical information, affected software versions, or exploitation data. The IOC is intended for situational awareness rather than indicating an active vulnerability or exploit.

Indicators of compromise

Domains 2,009

0ba7.vqlbhbmo.xyzapt_unc6691
101.vqlbhbmo.xyzapt_unc6691
4cae9.epwjvmj.comapt_unc6691
d031.epwjvmj.comapt_unc6691
dsckfgw.comapt_unc6691
epwjvmj.comapt_unc6691
todudma.comapt_unc6691
ugdsqymc.xyzapt_unc6691
vqlbhbmo.xyzapt_unc6691
enceladus.thornton.infohak5cloud_c2

URLs 49

https://api.github.com/repos/stamparm/maltrail/commits/89961c2d84de54a48d17e67b0a8384871633b1e3apt_unc6691
https://api.github.com/repos/stamparm/maltrail/commits/4cc94aea1d462cc6a3491c30ddfaee28a55a33e7orcusrat
https://www.virustotal.com/gui/file/07f56ac8b5bd7cdb4c33ea5e9cd42bc7f9d3cd5504aabbb476ef010a142d7e29/detectionorcusrat
https://api.github.com/repos/stamparm/maltrail/commits/6184cf99bf0794c16bb7f2d866bc959d46711264hak5cloud_c2
https://api.github.com/repos/stamparm/maltrail/commits/37c93cb361ded09ffc49e6245eecc397fcabaf21fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/ac94fe5dc84fd82a9c48df8384efa478c63ef6e5osx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/80b0bed9581ff73bf99a4f274700a818efc7f3e2android_joker
https://api.github.com/repos/stamparm/maltrail/commits/4f03547df334a5c40b92bbfb7616e702829b3598apt_unc6691
https://api.github.com/repos/stamparm/maltrail/commits/5e9bb0d072b99e45a6c24e0f66d494311b53c56dosx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/df1b8f93884bc322a1b4b66250f22d3f300cfe4d

IP addresses 5

87.120.187.0orcusrat
88.99.212.230apt_lazarus
176.65.132.10violetrat
108.187.7.232silverfox
2.56.10.101apt_transparenttribe

Community reviews

Loading reviews…