MalwarePublished 10 Mar 2026

tlp clear · Maltrail IOC for 2026-03-10

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-10

Impact

The impact is limited to detection and monitoring of potential malicious network activity. There is no direct exploit or vulnerability described, so no immediate compromise or damage is indicated. The IOC may assist defenders in identifying suspicious activity related to malware but does not represent an active exploit or vulnerability itself.

Defensive guidance

Security teams should incorporate this IOC into their detection and monitoring tools as appropriate. No urgent action is mandated based on the provided information.

Summary

The report details a malware-related IOC published on 2026-03-10 by the CIRCL OSINT Feed. It is classified as medium severity and relates to network activity observed externally. There are no specific affected software versions or technical exploitation details included. No known exploits or patches exist for this IOC, indicating it serves primarily as a detection signature or alert rather than a vulnerability requiring remediation.

Indicators of compromise

Domains 1,224

gtopsed.dns.armyapt_kimsuky
ipscorped.dns.navyapt_kimsuky
ipsedx.dns.armyapt_kimsuky
ipsgtt.dns.armyapt_kimsuky
moisesd.dns.armyapt_kimsuky
nav-logins.ipscorped.dns.navyapt_kimsuky
nav-logins.navdocs-main.dns.navyapt_kimsuky
nav-logins.navorntes.dns.armyapt_kimsuky
navdocs-main.dns.navyapt_kimsuky
navesps.dns.navyapt_kimsuky

URLs 77

https://api.github.com/repos/stamparm/maltrail/commits/7219f60200bca28d2fdba7686469f27113dd3b3aapt_kimsuky
https://www.virustotal.com/gui/ip-address/118.193.68.242/relationsapt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/cde9de12bba8717514b0b85d1ae78b3993cf380cfakeapp
https://github.com/hagezi/dns-blocklists/issues/9360fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/b49f4a29470afafc6ca5400136628d952715bf56osx_nova
https://api.github.com/repos/stamparm/maltrail/commits/04617510f9afcbec90b7265a8f32cded8b505673generic
https://x.com/smica83/status/2031131898328633354generic
https://api.github.com/repos/stamparm/maltrail/commits/b263c39cc2d4a58ad119c33d019c1678b91fc2e1
https://x.com/banthisguy9349/status/2031287994880241961
https://www.virustotal.com/gui/file/decae38742c168c48423b4624cb6cc48159863684465b9a1414f04608cf66769/detection

IP addresses 8

158.180.89.143cyberstrikeai
185.219.220.73plugx
91.193.17.117plugx
31.57.216.126android_ermac
5.161.159.119apt_transparenttribe
217.119.139.23dcrat
178.22.24.175quasarrat
154.218.3.133gh0strat

Community reviews

Loading reviews…