tlp clear · Maltrail IOC for 2026-04-18
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-04-18
Indicators of compromise
Domains 362
- eightiesvintagestyle.comwp_inject
- fivesecondoutfit.comwp_inject
- fourseasonwardrobe.comwp_inject
- nineyarddress.comwp_inject
- onestyleshop.comwp_inject
- sevensizesclothing.comwp_inject
- sixpocketjeans.comwp_inject
- threehoodiesbrand.comwp_inject
- twotrousersstore.comwp_inject
- zerowastefashion.netwp_inject
URLs 22
- https://api.github.com/repos/stamparm/maltrail/commits/529d6322260c351dc9fff30b36ce0e5b217fe040wp_inject
- https://x.com/unmaskparasites/status/2045229462921343473wp_inject
- https://api.github.com/repos/stamparm/maltrail/commits/74315d57055441f38d6eeecd2607063d1df8e417powershell_injector
- https://x.com/smica83/status/2045239389987463288powershell_injector
- https://www.virustotal.com/gui/file/f6b1f7b24b1a8e11ed93f906a5fa6dee63de357b9034317efcc14bb44b7c68a8/detectionpowershell_injector
- https://api.github.com/repos/stamparm/maltrail/commits/854c727aaa6a05b0f516d253e0b1c604fbc41703apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/f1cd16d5f9873d517b5b419c8c51f933a075d746osx_nova
- https://api.github.com/repos/stamparm/maltrail/commits/94dc8b2180050a98e02c78c45927e8bb66cad0a7valleyrat
- https://x.com/BreakGlassIntel/status/2045300165330837575valleyrat
- https://www.virustotal.com/gui/file/f0fc5a9aead0bed9f97e4a007bf712aef4ab95e1abaf6150fee7f51602d57347/detectionvalleyrat
IP addresses 4
- 137.220.153.175valleyrat
- 188.137.255.66shadow_c2
- 86.109.75.167wp_inject
- 84.200.192.206nightshadec2
Community reviews
Loading reviews…