MalwarePublished 29 Mar 2026

tlp clear · Maltrail IOC for 2026-03-29

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-29

Impact

The impact is currently assessed as medium risk malware activity detected through network monitoring. There are no known exploits in the wild and no affected product versions specified, limiting direct impact assessment. This IOC serves as an alert for potential malicious network behavior rather than a vulnerability with a direct exploit path.

Defensive guidance

No patches or official fixes are available or applicable for this IOC. Security teams should incorporate this IOC into their network monitoring and detection systems as part of threat intelligence updates. No immediate remediation actions are indicated beyond standard monitoring and alerting based on this intelligence.

Summary

The report details a Maltrail IOC from the CIRCL OSINT Feed dated March 29, 2026, indicating observed malware-related network activity. It is classified as medium risk and is based on manual collection of open-source intelligence. No technical indicators or affected product versions are specified, and no known exploits or patches exist for this IOC. The threat is primarily informational for network defense and monitoring purposes.

Indicators of compromise

Domains 612

brakehumor.infooffloader
dinnercard.xyzoffloader
regretsquirrel.xyzoffloader
brkun.bondandroid_joker
mawore.techandroid_joker
muikif.inkandroid_joker
fileshare.vglummac2
arnicnm.clicklummac2
baggiup.cyoulummac2
combktt.cyoulummac2

URLs 33

https://api.github.com/repos/stamparm/maltrail/commits/db0b2266ff123fc70d95da7b1de641697b1c4d32offloader
https://api.github.com/repos/stamparm/maltrail/commits/f5ad3e23a0a001e35e236d7bb53df00448cba1cdandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/8d72917753e7912f58c189296354cf9cc10d5db1lummac2
https://api.github.com/repos/stamparm/maltrail/commits/5a7260b4c95597a3530e3a9a89ee3f616df1dc45android_promptspy
https://api.github.com/repos/stamparm/maltrail/commits/12800cd1279deb8d956d8c16b1887cb6e18e2c4aosx_nova
https://api.github.com/repos/stamparm/maltrail/commits/755ebd52043c2876910d03cc33ebf670d1c1b246tsundere
https://x.com/skocherhan/status/2010037491743764737tsundere
https://x.com/g0njxa/status/2020975743707336822tsundere
https://x.com/RacWatchin8872/status/2021374272137199959tsundere
https://www.virustotal.com/gui/file/02ee182859bc4084b8ff96e65256eb7867e75468f9e12c732f63036d4d1f4359/detectiontsundere

IP addresses 3

193.200.17.66tsundere
89.124.77.234tsundere
45.148.10.212teampcp

Community reviews

Loading reviews…