MalwarePublished 22 Apr 2026Updated 23 Apr 2026

tlp clear · Maltrail IOC for 2026-04-23

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-23

Impact

As this is an IOC related to malware detection and not a software vulnerability, the impact is primarily informational for threat detection and network monitoring. There is no direct exploit or patchable flaw involved. Organizations can use this IOC to enhance detection capabilities but are not required to apply patches or fixes.

Defensive guidance

Organizations should incorporate this IOC into their threat detection systems as appropriate. Since no specific remediation is provided, no urgent action is required beyond monitoring and detection improvements.

Summary

The report details a malware-related IOC published by CIRCL OSINT Feed on April 23, 2026. It is classified as medium risk and relates to network activity observations. No affected software versions or specific vulnerabilities are identified, and no exploits are known. The data is derived from manual OSINT collection without automated verification.

Indicators of compromise

Domains 76

script-dev.buzzek_clearfake
script-dev.digitalek_clearfake
script-dev.xyzek_clearfake
scarecrowcare.xyzoffloader
38-54-108-229.nip.ioadaptix_c2
bmwservicebestik.comnightshadec2
newpayerforhomies.comnightshadec2
trindastal.comnightshadec2
atagkeukentechniek.comtsundere
ipkdh.comtsundere

URLs 27

https://api.github.com/repos/stamparm/maltrail/commits/3268f88f70ec4d2918decef92a5fbc1104ae61ffek_clearfake
https://x.com/pcrisk/status/2047219293197103521ek_clearfake
https://www.virustotal.com/gui/ip-address/144.31.236.66/relationsek_clearfake
https://api.github.com/repos/stamparm/maltrail/commits/59d9cf8c4b2e04ff76ab6a91fac1d858850714a1
https://research.checkpoint.com/2026/dfir-report-the-gentlemen
https://www.silentpush.com/blog/gentlemen-ransomware
https://api.github.com/repos/stamparm/maltrail/commits/99db64587ae2be9bc05df4673955a0758f99d66csystembc
https://www.virustotal.com/gui/file/992c951f4af57ca7cd8396f5ed69c2199fd6fd4ae5e93726da3e198e78bec0a5/detectionsystembc
https://api.github.com/repos/stamparm/maltrail/commits/af4ab19b27ac3b5474c865c645d85efd950c4567offloader
https://api.github.com/repos/stamparm/maltrail/commits/ea67624e705cba6137eeab60f1df0b3a7b38484aadaptix_c2

IP addresses 3

91.107.247.163
45.86.230.112systembc
31.44.4.127asyncrat

Community reviews

Loading reviews…