MalwarePublished 10 Apr 2026Updated 11 Apr 2026

tlp clear · Maltrail IOC for 2026-04-11

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-11

Impact

The impact is currently limited to the identification of potentially malicious network activity as flagged by Maltrail. There is no evidence of active exploitation or direct compromise linked to this IOC. Without specific affected versions or exploit details, the operational impact remains informational and situational awareness focused.

Defensive guidance

No patches or official remediation are available or applicable for this IOC. Security teams should incorporate this IOC into their network monitoring and threat detection systems as appropriate. Since this is an observational indicator without active exploits, no urgent remediation actions are required.

Indicators of compromise

Domains 34

lodra.helpandroid_joker
read73s.dynv6.netapt_kimsuky
rule52s.dynv6.netapt_kimsuky
rule62s.dynv6.netapt_kimsuky
check.nid-log.comapt_kimsuky
libertybigestnoob.infofakeav
statav2013.comfakeav
207-148-122-131.cprapid.comadaptix_c2
flocompsrep.comadaptix_c2
klaviyo-logs-campaigns.comadaptix_c2

URLs 39

https://api.github.com/repos/stamparm/maltrail/commits/eaf80eb0c49bdfa8748180da3975c2e89f9d954fobsidianstrikec2
https://x.com/whoamix302/status/2042495957875769489obsidianstrikec2
https://api.github.com/repos/stamparm/maltrail/commits/889cb1b3b72097eeb1cdb2b9528588251bc5e1a9android_joker
https://api.github.com/repos/stamparm/maltrail/commits/c32d3d3a8d65137f19b191af77befa8a11d955a8generic
https://x.com/1ZRR4H/status/2041980239748743378generic
https://api.github.com/repos/stamparm/maltrail/commits/3f6da924c848ec51039f5878c2625b343440772bpowershell_injector
https://www.virustotal.com/gui/file/db983813be5b9d7243ddfd3bc7ca3ab5e462f8b50571c250e91414ba1f5cbf30/detectionpowershell_injector
https://api.github.com/repos/stamparm/maltrail/commits/87078cf1fca2e748865f56fb49e234e190e99360elf_mirai
https://www.virustotal.com/gui/file/032ffe0fc9acd67b5e38d5c7239a5c273d76a61c22667ce98b577a84bbf5508a/detectionelf_mirai
https://api.github.com/repos/stamparm/maltrail/commits/aae99c6654135bace18388402a0e672be4c2610dvalleyrat

IP addresses 14

137.184.240.126obsidianstrikec2
137.184.76.141obsidianstrikec2
67.215.232.25generic
129.213.9.74powershell_injector
101.33.117.200valleyrat
144.76.57.92smm_spamtool
23.94.199.102smm_spamtool
216.206.238.106android_bankbot
217.172.178.104fakeav
23.94.199.104smm_spamtool

Community reviews

Loading reviews…