MalwarePublished 26 Apr 2026Updated 27 Apr 2026

tlp clear · Maltrail IOC for 2026-04-27

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-27

Impact

The impact is limited to the presence of malware-related network indicators that may signify malicious activity. Since no specific affected versions or exploits are identified, the direct impact on systems cannot be determined from this data alone. It serves primarily as an alert for potential malware activity in network traffic.

Defensive guidance

Organizations should incorporate this IOC into their threat detection and monitoring systems as appropriate. No urgent action is mandated by the vendor or source. Standard network monitoring and incident response procedures aligned with malware detection are recommended.

Summary

The report details a malware IOC identified on 2026-04-27 by CIRCL OSINT Feed. It is classified as medium risk and relates to network activity observed externally. There are no affected software versions or products specified, no known exploits, and no available patches. The IOC is part of ongoing threat intelligence collection and does not describe a specific vulnerability or exploit method.

Indicators of compromise

Domains 1,580

pricelou.cyoulummac2
wdqoqwdkoqdw.infoosx_nova
confirmationporscheadkvmc.comnightshadec2
metricflow.bondfakeapp
mt.whatsappglobal.com.cnfakeapp
whatsappglobal.com.cnfakeapp
vmi3101759.contaboserver.nethak5cloud_c2
nid-naverkrl.servequake.comapt_kimsuky
appleviewer.sbsapt_kimsuky
ncloud.julgiya.comapt_kimsuky

URLs 62

https://api.github.com/repos/stamparm/maltrail/commits/5dd707a93bb68d34ae0bd2ef813d7b1bf4ca49delummac2
https://api.github.com/repos/stamparm/maltrail/commits/0315ba3bc364a098036c4785b6c136aec95484b3cyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/00bebe3011162443942772e6409d9571dce30df6osx_nova
https://api.github.com/repos/stamparm/maltrail/commits/24511047b9e0ce96587168d70cc2aad4dff491f4vacbot
https://api.github.com/repos/stamparm/maltrail/commits/d957ccf09d846c0e2cb322e7c7b887fd979fbf19nightshadec2
https://api.github.com/repos/stamparm/maltrail/commits/2a7b4c7f9cbcae9f1523612e4fa8bb279a6aed04fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/0a7e6ea28ac4a2fc6eff2881749da8533868f478supershell_c2
https://api.github.com/repos/stamparm/maltrail/commits/d51f3f3f19d65b22011b65db73deb7172081e7afhak5cloud_c2
https://api.github.com/repos/stamparm/maltrail/commits/ce4fe73c13b825af4f901c1db78db16e2ac6a3f7apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/b4cecc253ec028805f99c38fb031ca0d9626d5f2osx_atomic

IP addresses 11

124.71.179.73cyberstrikeai
151.245.32.184vacbot
154.89.151.212supershell_c2
199.68.217.18supershell_c2
136.0.10.176georgeginx
136.0.8.152georgeginx
23.27.142.36georgeginx
147.45.79.74vivarat
102.41.20.180asyncrat
104.164.55.223powershell_injector

Community reviews

Loading reviews…