MalwarePublished 28 Apr 2026Updated 29 Apr 2026

tlp clear · Maltrail IOC for 2026-04-29

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-29

Impact

The impact is currently limited to detection and monitoring of suspicious network activity associated with the reported IOC. There is no evidence of active exploitation or direct compromise from this IOC. It serves primarily as a threat intelligence observation to aid in identifying potential malicious activity.

Defensive guidance

Security teams should incorporate this IOC into their detection and monitoring tools as appropriate. Since no active exploitation is known, no urgent action is mandated beyond standard threat intelligence integration.

Summary

The report details a malware-related IOC identified by Maltrail on April 29, 2026, as part of the CIRCL OSINT Feed. It is categorized under network activity and external analysis but lacks detailed technical indicators or affected software versions. No exploits have been observed in the wild, and no remediation or patch exists for this IOC. The threat is assessed as medium severity based on the source classification.

Indicators of compromise

Domains 1,747

nineteenthirtyone.comnightshadec2
old.nineteenthirtyone.comnightshadec2
johnsonej.digitaltsundere
resumeacceptable.comtsundere
wowrehberi.comtsundere
selectionbridge.spaceoffloader
server.theater-reward.clickmintsloader
ncodbzpass.dynv6.netapt_kimsuky
ncodcapass.dynv6.netapt_kimsuky
ncodcbpass.dynv6.netapt_kimsuky

URLs 68

https://api.github.com/repos/stamparm/maltrail/commits/da6de6aa0f01231a5ee8883eb9e6b65781a0d183supershell_c2
https://api.github.com/repos/stamparm/maltrail/commits/a3b830badb051ac092d3795abd6aae0c26aae02dnightshadec2
https://api.github.com/repos/stamparm/maltrail/commits/17590d212b403e4c9268a36f3ad574cbafda486btsundere
https://api.github.com/repos/stamparm/maltrail/commits/11e456d8bed926d0f4dd66982413244266ef839boffloader
https://api.github.com/repos/stamparm/maltrail/commits/0314a7d4e48c3cf8adebca06a9a1540076aaa29amintsloader
https://api.github.com/repos/stamparm/maltrail/commits/9df02a4e704d2080b451dfd252ec5e6d69d148c5apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/cbaa3bed1d7ff33f592107ca645502bd3c4e5131lummac2
https://api.github.com/repos/stamparm/maltrail/commits/332ac5daa15c86b5a85e5e443bdc89757aec35ebc2_panel
https://api.github.com/repos/stamparm/maltrail/commits/1162a6ce3abae10f3008ded4a4fb8a89abba11f1peaklight
https://api.github.com/repos/stamparm/maltrail/commits/2afd642e0e48f616cdbf8dc2b3095de3e728a2aaosx_atomic

IP addresses 21

104.194.84.162supershell_c2
185.117.72.215tsundere
64.52.80.153mintsloader
96.9.124.111c2_panel
45.147.253.15cyberstrikeai
143.198.228.219lummac2
31.97.61.212lummac2
67.205.186.254lummac2
185.102.115.84kbc2
115.175.16.26

Community reviews

Loading reviews…