MalwarePublished 23 Apr 2026Updated 27 Jun 2026

tlp clear · Maltrail IOC for 2026-04-24

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-24

Impact

Since no specific vulnerabilities, exploits, or affected software versions are identified, the direct impact cannot be precisely determined. The medium severity rating suggests a moderate risk level associated with the observed malware activity, but no active exploitation or damage details are provided.

Defensive guidance

Security teams should consider this information as part of their threat intelligence to enhance detection capabilities but no direct remediation actions are specified by the source.

Summary

The provided information describes a malware-related IOC published on 2026-04-24 by the CIRCL OSINT Feed. It is categorized as an observation of network activity linked to malware but lacks detailed technical indicators, affected software versions, or exploit information. The data serves as an open-source intelligence alert rather than a vulnerability or active threat with actionable remediation.

Indicators of compromise

Domains 590

grandinaspectrum.comapt_bitter
bossmaya.xyzapt_transparenttribe
makiinindia.onlineapt_transparenttribe
makiinindia.xyzapt_transparenttribe
esevasecurefile.storeapt_transparenttribe
monitorondomainwintgt.storeapt_transparenttribe
amphibgz.cyoulummac2
lovesozp.cyoulummac2
oncolonb.cyoulummac2
peafamqe.cyoulummac2

URLs 88

https://api.github.com/repos/stamparm/maltrail/commits/36bc43ccc4ac606e35668faea5db0f4af3ae88daapt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/77eac98892aecebb89dac495fed0503c2f336583cyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/d3d489840a1c1ffe367946fcc1cd2a647a732616apt_bitter
https://x.com/RedDrip7/status/2047579562184413587apt_bitter
https://www.virustotal.com/gui/file/563fd6ff3f767d8120731803aeec9e5f5fc3a26a48567ac57d95493ca18133ee/detectionapt_bitter
https://www.virustotal.com/gui/file/85fae6eb3d173274e59293d31d48c119608682862390f70d58b9ad7465dcbc1e/detectionapt_bitter
https://api.github.com/repos/stamparm/maltrail/commits/b581d15771ab1991c29a13cca3b8bd2c11df5141generic_stealer
https://x.com/smica83/status/2047455483640844718generic_stealer
https://www.virustotal.com/gui/file/a665475e8eca412c871fa902eb81e6a941eda9ed6bd707a68d3c413a8a6388c8/detectiongeneric_stealer
https://api.github.com/repos/stamparm/maltrail/commits/d7d94d6c6c7427b73abccbb201faac4d5f13b55fapt_transparenttribe

IP addresses 62

147.124.202.206apt_lazarus
216.250.248.160apt_lazarus
124.223.36.16cyberstrikeai
5.175.136.111generic_stealer
136.0.7.16georgeginx
136.0.8.219georgeginx
23.27.125.231georgeginx
23.27.126.30georgeginx
151.246.238.186sectoprat
185.112.59.99sectoprat

Community reviews

Loading reviews…