MalwarePublished
tlp clear · Maltrail IOC for 2026-03-21
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-03-21
Indicators of compromise
Domains 27
- account-ndax.com0ktapus
- mykkrconnect.com0ktapus
- mynikemanager.com0ktapus
- ndocacverify.dynv6.netapt_kimsuky
- ndocadcheck.dynv6.netapt_kimsuky
- ndocaeverify.dynv6.netapt_kimsuky
- ndocafverify.dynv6.netapt_kimsuky
- ndocagverify.dynv6.netapt_kimsuky
- ndocahverify.dynv6.netapt_kimsuky
- ndocakverify.dynv6.netapt_kimsuky
URLs 13
- https://api.github.com/repos/stamparm/maltrail/commits/bb17ae03e79565a2bd38f301410ccb87c6de5c780ktapus
- https://api.github.com/repos/stamparm/maltrail/commits/9a4b811044c06c664f6c5239de239e2b452cef42apt_kimsuky
- https://x.com/skocherhan/status/2035212493694406693apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/b2906f66cce576d98a881e718d84b08ff400c332vshell
- https://x.com/smica83/status/2035101635261714558vshell
- https://www.virustotal.com/gui/file/2f28ee264c23671661f57ab5a0f16941190af60232919dcbdfc9a3bb2669c82d/detectionvshell
- https://www.virustotal.com/gui/file/c42ba1a03d8593f84246e27e1730f8d353d29f1b94738e079fbbf9673319848a/detectionvshell
- https://www.virustotal.com/gui/file/c6c28cd300143b20a0728a96bfc9098749d97871dbe8a85a7a507f97b23cc60c/detectionvshell
- https://api.github.com/repos/stamparm/maltrail/commits/4b2213c6833e2cbcc972a0d886bc25d41788e739android_bankbot
- https://x.com/KesaGataMe0/status/2034532860066243028android_bankbot
IP addresses 2
- 45.78.53.77vshell
- 161.33.154.144android_bankbot
Community reviews
Loading reviews…