MalwarePublished 13 Apr 2026Updated 14 Apr 2026

tlp clear · Maltrail IOC for 2026-04-14

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-14

Impact

The impact is assessed as medium risk based on the source tagging. However, no direct exploitation or damage details are provided. The absence of known exploits in the wild suggests limited immediate threat. The IOC may help identify malicious network traffic but does not specify affected systems or compromise outcomes.

Defensive guidance

Security teams should incorporate the IOC into their network monitoring and threat detection tools to identify potential malicious activity. Since this is an intelligence observation rather than a vulnerability, no direct remediation actions are prescribed.

Summary

The report details a Maltrail IOC for April 14, 2026, indicating detection of suspicious or malicious network activity associated with malware. It originates from the CIRCL OSINT Feed and is tagged with medium threat level and unsupervised automation. No specific vulnerabilities, affected software versions, or exploit techniques are described. The IOC serves as an external observation to inform network defense and monitoring efforts.

Indicators of compromise

Domains 4,354

abrocomestack.click
achomawigrid.click
actableflow.click
adroitertech.click
advenaflow.click
agapaihub.digital
agoraeflow.click
algeritestackio.click
almachtech.click
amatitocore.click

URLs 34

https://api.github.com/repos/stamparm/maltrail/commits/02ef7302caaa51004fe46bf8dda2c7013710dc15apt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/7c7973200f590c1baf8f3a58133c193c87f24928
https://api.github.com/repos/stamparm/maltrail/commits/090a471532adedc25b6626455de74cb826c43617
https://api.github.com/repos/stamparm/maltrail/commits/72377c88097367ca58eedcfacf59d6ed820e7673
https://api.github.com/repos/stamparm/maltrail/commits/ab97c2b113a9399ad5075b76ce3cf50fb170025a
https://api.github.com/repos/stamparm/maltrail/commits/0f14509f53b16229e5069b79acd33f0f04ac38c9
https://api.github.com/repos/stamparm/maltrail/commits/e96f49a5eefc187283001134e70ee83aea15decdc2_panel
https://x.com/JustWantToQ1/status/2043797085573542136c2_panel
https://api.github.com/repos/stamparm/maltrail/commits/abbc592f31b6eade2c35d2207d3d31cc3966bb87android_bankbot
https://x.com/BlinkzSec/status/2043731539330990181android_bankbot

IP addresses 16

38.92.47.167apt_lazarus
147.45.156.34c2_panel
188.225.75.47c2_panel
85.92.108.71c2_panel
195.177.94.44santa
178.16.55.36santa
140.143.193.228cyberstrikeai
165.245.182.18cyberstrikeai
23.106.154.202cyberstrikeai
43.165.5.234cyberstrikeai

Community reviews

Loading reviews…