Skip to main content
MalwarePublished Updated

tlp clear · Maltrail IOC for 2026-04-07

Affects tlp clearSource CIRCL OSINT Feed

0

TLP:CLEAR, disclosure is not limited

Description

Maltrail IOC for 2026-04-07

Indicators of compromise

Domains 867

  • 54mx4.comapt_unc6691
  • greensignal.vipadaptix_c2
  • admin.thotera.comhak5cloud_c2
  • autoconfig.thotera.comhak5cloud_c2
  • polishswimgownsayjwui.shopslummac2
  • stxarnavig.livelummac2
  • dynamiczl.liveslummac2
  • polishswimgownsayjwui.shoplummac2
  • dynamiczl.livelummac2
  • boreholeconstruction.orglummac2

URLs 103

  • https://api.github.com/repos/stamparm/maltrail/commits/e80d3fab22f4d3fc0c1ff37a51a0afe2ad3fc7fbapt_unc6691
  • https://api.github.com/repos/stamparm/maltrail/commits/400eac356c69beefd3b2edd58edb3777fcf1f576adaptix_c2
  • https://api.github.com/repos/stamparm/maltrail/commits/9efe67eeaa48b5f6d91e692f5620483a718c5f29hak5cloud_c2
  • https://api.github.com/repos/stamparm/maltrail/commits/d51204cdb47fac97375ba271d6bc255e93e97cd4lummac2
  • https://www.virustotal.com/gui/file/81e2a43a2e5ff619294d195aaaba2eb9c7d3d4bdbb19fce5adf262857a237fe5/detectionlummac2
  • https://api.github.com/repos/stamparm/maltrail/commits/c5617a29e5221a268a23562657c1a779f35aeb3flummac2
  • https://www.virustotal.com/gui/file/6c1450fdd81c480196863e6fe65af06d2024aef1adb9ab6074f16ba7fdfec83e/detectionlummac2
  • https://api.github.com/repos/stamparm/maltrail/commits/2db19b77daa44af51f50d09f9a189e9dc9676175lummac2
  • https://www.virustotal.com/gui/file/004691505ae774938b46b7191ea9f216b391c705eef3b86fec3c2921c75f54f0/detectionlummac2
  • https://api.github.com/repos/stamparm/maltrail/commits/9b8f767c26ae802c5fb1b45840c2feb7e9ac62f5lummac2

IP addresses 21

  • 102.220.91.114supershell_c2
  • 154.12.91.171supershell_c2
  • 45.205.2.56supershell_c2
  • 48.222.9.8powershell_injector
  • 195.128.248.31exa
  • 4.180.17.86exa
  • 193.181.214.66aurac2
  • 107.189.21.37blackteam
  • 144.172.87.118blackteam
  • 45.142.193.27netsupport

Community reviews

Loading reviews…