MalwarePublished 1 May 2026Updated 2 May 2026

tlp clear · Maltrail IOC for 2026-05-02

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-05-02

Impact

The impact is currently limited to threat intelligence awareness as no specific exploits or affected products are identified. Without known exploits or affected versions, there is no direct evidence of active compromise or vulnerability exploitation associated with this IOC.

Defensive guidance

Organizations should incorporate this IOC into their threat detection and monitoring systems as part of routine OSINT integration but no urgent action is indicated.

Summary

The report details a malware-related IOC published by CIRCL OSINT Feed for the date 2026-05-02. It is classified as medium severity and pertains to network activity observations. There are no affected product versions listed, no known exploits in the wild, and no available patches. The IOC is part of ongoing OSINT efforts to monitor potential threats but lacks detailed technical indicators or exploit information.

Indicators of compromise

Domains 20

htr19ies.dynuddns.comapt_kimsuky
htr6ies.dynv6.netapt_kimsuky
itx26ps.dns.armyapt_kimsuky
itx8ps.dns.armyapt_kimsuky
itxa16ns.dns.armyapt_kimsuky
mois11ex.dynv6.netapt_kimsuky
nav-logins.nts19pops.dns.armyapt_kimsuky
nid-login.itx26ps.dns.armyapt_kimsuky
nida.mois11ex.dynv6.netapt_kimsuky
nida.tpx11sdoc.dns.armyapt_kimsuky

URLs 14

https://api.github.com/repos/stamparm/maltrail/commits/8ff99980175241db4299740a58951211e057a546elf_mirai
https://www.darktrace.com/blog/darktrace-malware-analysis-jenkins-honeypot-reveals-emerging-botnet-targeting-online-gameself_mirai
https://www.virustotal.com/gui/file/f79d05065a2ba7937b8781e69b5859d78d5f65f01fb291ae27d28277a5e37f9b/detectionelf_mirai
https://www.virustotal.com/gui/file/f75e9af2f04a7efecacc9d88bb2f30959310c863abf9981eeac7b97debb363b9/detectionelf_mirai
https://www.virustotal.com/gui/file/40e196407e4039d873ded5c5d19bc6906f5e820e7f2b84732d23272464314562/detectionelf_mirai
https://www.virustotal.com/gui/file/3d5f8dfe9915671a15171952f6de4e1719ddbd3984a31e2c98f4597b70fc649b/detectionelf_mirai
https://www.virustotal.com/gui/file/10725167cc4b6bcc41c987450b109d19f5a3657b58fd95a5060619170580337e/detectionelf_mirai
https://api.github.com/repos/stamparm/maltrail/commits/fca3af3c2e915f6b04f08e5cb049cee954f04e83apt_kimsuky
https://x.com/skocherhan/status/2050283519348261205apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/c5aa6297679f18738e7880d0a781aa8be0cc5a90powershell_injector

IP addresses 3

103.177.110.202elf_mirai
149.248.78.202python_injector
87.120.186.229python_injector

Community reviews

Loading reviews…