MalwarePublished
tlp clear · Maltrail IOC for 2026-03-25
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-03-25
Indicators of compromise
Domains 850
- 0pen-cache.thornbay.in.netek_clearfake
- atomiclogichub.in.netek_clearfake
- br1ghtpath.in.netek_clearfake
- brimvale.in.netek_clearfake
- brokerancient.br1ghtpath.in.netek_clearfake
- chrysalisbuffer.in.netek_clearfake
- cinder-row.in.netek_clearfake
- cl0verrun.in.netek_clearfake
- cl1store.chrysalisbuffer.in.netek_clearfake
- cl1sync.inertialstreamhub.in.netek_clearfake
URLs 60
- https://api.github.com/repos/stamparm/maltrail/commits/3ac7360d58e8ed6d5ffc0d06be500973ed4623bcasyncrat
- https://www.virustotal.com/gui/file/a8d214b32d8d0074b8dd8682852a66e9b4dd8566ea2e5255085858bc64034f44/detectionasyncrat
- https://api.github.com/repos/stamparm/maltrail/commits/ed88fa18ac75728b744e168364872d450f8565f6ek_clearfake
- https://api.github.com/repos/stamparm/maltrail/commits/cd8c69e7cde414a37e24c02739b65d749110ffedhak5cloud_c2
- https://api.github.com/repos/stamparm/maltrail/commits/24e8dde46aaa3550c22dff007c8484bdeda82371fakeapp
- https://www.virustotal.com/gui/file/cf36607a670996c7b8b275132bef9e8faacf5f97a3268edaa23b5e2e5a3fdf29/detectionfakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/de0a44ee5111aa9f95dcd2941a2d9a5226549124osx_atomic
- https://api.github.com/repos/stamparm/maltrail/commits/3dad02fd7f7b2feea76308aa25ca23d6be940d9bapt_kimsuky
- https://x.com/skocherhan/status/2036444684436865138apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/5799ec1daf5808859ab75afccf70cf08eca578celummac2
IP addresses 16
- 86.54.24.144asyncrat
- 104.167.196.22cyberstrikeai
- 175.178.190.133cyberstrikeai
- 193.222.99.148cyberstrikeai
- 43.132.155.28cyberstrikeai
- 45.8.30.146cyberstrikeai
- 45.8.30.149cyberstrikeai
- 66.29.138.247cyberstrikeai
- 66.29.138.250cyberstrikeai
- 82.156.203.34cyberstrikeai
Community reviews
Loading reviews…