MalwarePublished
tlp clear · Maltrail IOC for 2026-03-16
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-03-16
Indicators of compromise
Domains 1,119
- mydisneyconnect.com0ktapus
- purpleidconnect.com0ktapus
- discovertravelvibes.liveek_clearfake
- exploretraveldream.liveek_clearfake
- globaltravelexperience.liveek_clearfake
- movementtravelchronicles.liveek_clearfake
- nomadicspirittravel.liveek_clearfake
- remotetravelsagas.liveek_clearfake
- traveltalesabroad.xyzek_clearfake
- travelvisionvoyages.liveek_clearfake
URLs 72
- https://api.github.com/repos/stamparm/maltrail/commits/0fc6a06097eabf68ef2a919d222851218c70966b0ktapus
- https://api.github.com/repos/stamparm/maltrail/commits/f8cae0c2f3d84f42d550aaa18aa3f52c44dd2e1bsectoprat
- https://api.github.com/repos/stamparm/maltrail/commits/7981698ae5feb72a635f6dcb2a954095a3dda1b4cyberstrikeai
- https://api.github.com/repos/stamparm/maltrail/commits/7240e0c4789a8fa42961d1f8170d6d488d7a7176ek_clearfake
- https://api.github.com/repos/stamparm/maltrail/commits/16310ff18cd7809a8ff30f966842286e57bb6042powershell_injector
- https://www.virustotal.com/gui/ip-address/159.65.191.64/relationspowershell_injector
- https://api.github.com/repos/stamparm/maltrail/commits/3f279b36f041344ff774f5ed841d177a8ca9c21cek_clearfake
- https://api.github.com/repos/stamparm/maltrail/commits/6eb0aa5d55ba1c6aae0c85d11109cfafbf2bdf96netsupport
- https://api.github.com/repos/stamparm/maltrail/commits/31a5526c608e46092eac1dae644018d86b645f45ek_clearfake
- https://isc.sans.edu/diary/32796ek_clearfake
IP addresses 14
- 158.94.208.4sectoprat
- 34.64.83.63cyberstrikeai
- 20.2.90.98supershell_c2
- 38.54.40.38supershell_c2
- 65.2.19.211apt_transparenttribe
- 95.101.74.198apt_transparenttribe
- 157.180.88.26konni
- 96.62.214.5konni
- 178.16.54.208remcos
- 103.214.172.14
Community reviews
Loading reviews…