MalwarePublished 4 Apr 2026Updated 5 Apr 2026

tlp clear · Maltrail IOC for 2026-04-05

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-05

Impact

The medium severity rating suggests a moderate risk of malicious network activity, but without specific exploit or vulnerability details, the direct impact cannot be precisely determined. There is no evidence of active exploitation or affected software versions.

Defensive guidance

Since this is an IOC for network-based malware detection, defenders should incorporate the IOC into their monitoring and detection systems as appropriate. No urgent remediation actions are indicated by the vendor or source.

Summary

The threat is an IOC related to malware detected via Maltrail on April 5, 2026, sourced from CIRCL's OSINT feed. It represents observed network activity indicative of malicious behavior but lacks detailed technical indicators or exploit data. No affected software versions or patches are identified, and no known active exploitation is reported.

Indicators of compromise

Domains 81

accountsverify.kro.krapt_kimsuky
mexc.accountsverify.kro.krapt_kimsuky
crest-ind-snake-dublin.trycloudflare.comgeneric
coptu.helpandroid_joker
ichilaf.xinandroid_joker
spere.yogaandroid_joker
corp-embassy-finds-marked.trycloudflare.comtsundere
depot-reunion-listings-targets.trycloudflare.comtsundere
extended-king-tone-polar.trycloudflare.comtsundere
icq-flooring-procedure-rap.trycloudflare.comtsundere

URLs 21

https://api.github.com/repos/stamparm/maltrail/commits/2f0b1fc42a1fecd89d4e7635153dc33a530f5621apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/aa4fe44caa237d1d2a14fbe709f01f6e6737f6d4generic
https://www.virustotal.com/gui/file/63d0255437c890a4b13a8e8fb02c3b3edf8f8af3bb08293026076bfe626ef4df/detectiongeneric
https://api.github.com/repos/stamparm/maltrail/commits/0cbc208db61517bc05b101442659fb5ac6db194eandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/8d24cec06c81874bcc7a59c3fda882b3f6817f89tsundere
https://x.com/RacWatchin8872/status/2040580434363314252tsundere
https://api.github.com/repos/stamparm/maltrail/commits/61ea5d5e4964880e96263a06d0874e2ed5056a71ek_clearfake
https://api.github.com/repos/stamparm/maltrail/commits/8ac6974122549dd9a5033a0f5285c80dfee10275android_promptspy
https://api.github.com/repos/stamparm/maltrail/commits/a4e4d7361a5885366f3ebf093761b9c12dbbf6c7offloader
https://api.github.com/repos/stamparm/maltrail/commits/4376f5dd32c130294e429e2adaf6f9c5b00f7632elf_sshdoor

IP addresses 2

18.227.111.207elf_sshdoor
65.19.178.79xworm

Community reviews

Loading reviews…