tlp clear · Maltrail IOC for 2026-04-16
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-04-16
Indicators of compromise
Domains 1,375
- d21.eu89q.dns.armyapt_kimsuky
- deliver-doc.v6.navyapt_kimsuky
- deliver.miss-tax.dns.navyapt_kimsuky
- efine-log.kro.krapt_kimsuky
- electric-support.v6.rocksapt_kimsuky
- eu89q.dns.armyapt_kimsuky
- gent-pgr.dynv6.netapt_kimsuky
- gger.lnnot.dynv6.netapt_kimsuky
- lnnot.dynv6.netapt_kimsuky
- login.pay-tax.dns.navyapt_kimsuky
URLs 82
- https://api.github.com/repos/stamparm/maltrail/commits/dff186e6d272a0dd3e1cc140ca11cff9db7a5a4eapt_kimsuky
- https://www.virustotal.com/gui/ip-address/27.102.137.38/relationsapt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/53518eaebae8cd99d1c41cabe338803d91f05800apt_sidewinder
- https://x.com/__0XYC__/status/2042075173915127858apt_sidewinder
- https://x.com/SinghSoodeep/status/2043571382601289736apt_sidewinder
- https://www.virustotal.com/gui/file/492a46f495a17a0c5d7e59cf362f3f6f57f01c3be39f912e37ec51298fa73d6a/detectionapt_sidewinder
- https://api.github.com/repos/stamparm/maltrail/commits/e99d72b5f050cadd57c95874a65c8025d603c547discordgrabber
- https://www.virustotal.com/gui/file/1ff1ff48ed92b1ff424207c4b9e1b85a86a31ba99b00a5be65502b38ca8bc4b9/detectiondiscordgrabber
- https://api.github.com/repos/stamparm/maltrail/commits/582cadb80a925fcd7a85aba599020ace71175126
- https://api.github.com/repos/stamparm/maltrail/commits/fa71299d4a5cb8d0cf7ddc3ccc31259b1dbc75f0ek_clearfake
IP addresses 27
- 86.54.25.178discordgrabber
- 109.237.97.4apt_unclassified
- 109.237.97.43apt_unclassified
- 138.124.228.103apt_unclassified
- 194.87.108.110apt_unclassified
- 2.27.19.81apt_unclassified
- 89.125.189.118apt_unclassified
- 91.149.221.9apt_unclassified
- 91.149.253.100apt_unclassified
- 95.154.227.16apt_unclassified
Community reviews
Loading reviews…