MalwarePublished 8 Mar 2026

tlp clear · Maltrail IOC for 2026-03-08

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-08

Impact

Since no known exploits or affected versions are identified, and no technical indicators are provided, the direct impact cannot be assessed beyond the classification as medium risk malware activity. There is no evidence of active exploitation or targeted products.

Defensive guidance

Security teams should consider integrating this IOC into their threat detection systems if relevant, but no urgent action is indicated based on the provided data.

Summary

The report details a malware IOC collected manually and shared as open-source intelligence without specific affected versions or exploit details. It serves as an observation of potential malicious network activity rather than a vulnerability or active exploit. No technical indicators or actionable signatures are provided in the data.

Indicators of compromise

Domains 458

app.highmatch.proapt_lazarus
highmatch.proapt_lazarus
kuxyo.fanandroid_joker
maxtr.bizandroid_joker
unsk.onlineandroid_joker
gobay.infoplugx
wpscdn.vipplugx
windows.gobay.infoplugx
wps.wpscdn.vipplugx
moohshot.toposx_nova

URLs 44

https://api.github.com/repos/stamparm/maltrail/commits/8c6403d315bf445b57db9fb01e4ca0d6dfc062d7apt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/b689f7995596cb7b60c3d6e083d84b80f3365e09android_joker
https://api.github.com/repos/stamparm/maltrail/commits/bb5c0aef8ec4a8110499c9ce6d8bd3ef8eaedc9eplugx
https://x.com/G60930953/status/2030423022805414258plugx
https://www.virustotal.com/gui/file/b963a90730a0ac04e07f18e1cdcf9289c9e0aed336e448d3cf670bc13d000f3e/detectionplugx
https://www.virustotal.com/gui/file/216d4208f515859135457d7ed4788d8a2c200e5f84df31a25c0cf9accd5e8e1a/detectionplugx
https://www.virustotal.com/gui/file/b4d92c5557a3650fd136fd101c3b118d93929a996ac934e677b9d812b7af781b/detectionplugx
https://api.github.com/repos/stamparm/maltrail/commits/4ebc03838fadc82f3daf162c1b85267789c00fbdapt_transparenttribe
https://api.github.com/repos/stamparm/maltrail/commits/13ca0a34fd16afcb895efce52ce08a72c47d3dcfosx_nova
https://api.github.com/repos/stamparm/maltrail/commits/856c279b139881d3355f4e0037df642ad35df647fakeapp

IP addresses 4

93.127.133.106apt_transparenttribe
45.138.16.236asyncrat
185.244.104.209cyberstrikeai
37.233.83.185cyberstrikeai

Community reviews

Loading reviews…