MalwarePublished 28 Mar 2026

tlp clear · Maltrail IOC for 2026-03-28

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-28

Impact

The impact is currently limited to awareness of potential malware-related network activity. No direct exploitation or compromise details are provided, and no active exploits are known. Without specific indicators or affected versions, the operational impact cannot be precisely determined.

Defensive guidance

Security teams should consider this information as part of their threat intelligence but no immediate action is mandated based on this report alone. Monitoring for related network activity consistent with this IOC may be prudent.

Summary

The report details a malware-related IOC published by CIRCL OSINT Feed on 2026-03-28. It is classified as medium risk and relates to network activity observed externally. No affected product versions or specific vulnerabilities are identified. No exploits are known to be active, and no remediation or patch is available. The IOC appears to be observational intelligence without actionable technical indicators included.

Indicators of compromise

Domains 1,730

029g1.stonemuse.in.netek_clearfake
0islm.foxglade.in.netek_clearfake
0rrpdvc.blueoak.in.netek_clearfake
0sta343.aurorift.in.netek_clearfake
0xr5c.stonemuse.in.netek_clearfake
122jtw.zenithpatron.in.netek_clearfake
1502u.frost-echo.in.netek_clearfake
1ce2-port.frost-echo.in.netek_clearfake
1vyf96o.cl0verrun.in.netek_clearfake
2350.velorune.in.netek_clearfake

URLs 23

https://api.github.com/repos/stamparm/maltrail/commits/53956e7ac7848dbaa05c3a7d8185fcef0537a02aek_clearfake
https://api.github.com/repos/stamparm/maltrail/commits/8fef8f00a16388991d70199ced4f11403ce662c8supershell_c2
https://api.github.com/repos/stamparm/maltrail/commits/311033fb060f58f33ad7956ff2d33066e2fd1514apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/5f977f194ac22fe2c298e32e3103fcdb7608dc6cosx_nova
https://api.github.com/repos/stamparm/maltrail/commits/41f215ca35d9b8158af8aa15ee8ebc8c73272992apt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/8319aa81013e401dbc8cff9b8c4d608312ed5955apt_unc2465
https://api.github.com/repos/stamparm/maltrail/commits/6cec78d17072f6100002fcb3f35ae2a101e7ae6aandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/f3abdb245a473d59211de228a471182c58549fd4offloader
https://api.github.com/repos/stamparm/maltrail/commits/6797ac8ebd50b18b4dc295a9251b326a04b43c870ktapus
https://api.github.com/repos/stamparm/maltrail/commits/afe588eb6749ce9856ad019f21725d844427d507silverfox

IP addresses 3

8.216.26.169supershell_c2
216.250.248.200apt_lazarus
216.250.249.176apt_lazarus

Community reviews

Loading reviews…