MalwarePublished 14 Mar 2026

tlp clear · Maltrail IOC for 2026-03-14

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-14

Impact

No direct impact or exploitation details are provided. The IOC serves as a threat intelligence observation to aid detection and monitoring of potential malware-related network activity. There is no evidence of active exploitation or affected products.

Defensive guidance

Organizations should incorporate this IOC into their threat detection and monitoring systems as appropriate. No urgent action is required based on this report alone.

Summary

The report details a malware-related IOC collected manually and shared as open-source intelligence by CIRCL on 2026-03-14. It lacks specific affected software versions, exploit details, or actionable indicators. The IOC is classified as medium risk and is intended for external network activity monitoring. No direct vulnerabilities or exploits are described.

Indicators of compromise

Domains 461

aeqfjsa.icufakeapp
akyfgse.icufakeapp
aniibip.icufakeapp
aniibip.topfakeapp
atybsmz.icufakeapp
awiekek.icufakeapp
bbnxpkak.icufakeapp
bcjhlhuhq.icufakeapp
bdasree.icufakeapp
befzmdwo.icufakeapp

URLs 8

https://api.github.com/repos/stamparm/maltrail/commits/b8f9bf58e564e9c7eddb9e5e28c19c81b4d9cf77fakeapp
https://x.com/plebourhis/status/2032417385076957667fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/5bece3b3743b9231b3647df3f3c1df195c9803afvalleyrat
https://www.virustotal.com/gui/file/cf36607a670996c7b8b275132bef9e8faacf5f97a3268edaa23b5e2e5a3fdf29/detectionvalleyrat
https://api.github.com/repos/stamparm/maltrail/commits/18ed3c31c23886190a627322167c619d34e86cd1osx_atomic
https://x.com/MarceloRivero/status/2032582489315668322osx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/37a068f422da078ce14d1c9909793125206c7b83fakeapp
https://www.virustotal.com/gui/ip-address/77.238.248.228/relationsfakeapp

IP addresses 2

43.160.214.122valleyrat
77.238.248.228fakeapp

Community reviews

Loading reviews…