Maltrail IOC for 2026-05-22
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-05-22
Indicators of compromise
Domains 795
- 0frduisp.cloud-meridian.digital
- 0g6xawfs.badabingsopranoslounge.digital
- 0gmqmb12.orbitaldockingmodule.digital
- 0h5smwzp.network-forge.digital
- 0q9bvoqh.telemetry-vault.digital
- 0wv09g11.gothiccathedralblueprint.digital
- 0zfu07h8.audioattenuatorschematic.digital
- 1k78h3dc.kernel-vertex.digital
- 1ml4kzh4.subfossiloakchronology.digital
- 1qe4ncxx.runtime-forge.digital
URLs 18
- https://api.github.com/repos/stamparm/maltrail/commits/8aeb40fcb5e6612e3be87d80065b72866a2573e0
- https://api.github.com/repos/stamparm/maltrail/commits/d2b97a0a17eb67db657e78e01ffa23d9c074c132powershell_injector
- https://x.com/smica83/status/2057373839332458900powershell_injector
- https://tria.ge/260521-jzqs1abw8x/behavioral1powershell_injector
- https://api.github.com/repos/stamparm/maltrail/commits/562f1a2b7c32156a56fd98d4dbf401ed766c37cf
- https://api.github.com/repos/stamparm/maltrail/commits/f9fa3a0058f6fca8cca5210cf001372ce0757502apt_kimsuky
- https://x.com/skocherhan/status/2057532420128153905apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/d1e83a04badaf0e95c9666a2adb8298e81ce80be
- https://api.github.com/repos/stamparm/maltrail/commits/1e6871ac8a0a5f13b05d706b5c709d0b68b5e9d9
- https://app.validin.com/detail?find=%2Fvalidate-nohuman.php%3Fredirect%3D%2F&type=raw#tab=host_pairs
IP addresses 11
- 101.36.114.235apt_kimsuky
- 115.193.38.156apt_kimsuky
- 115.197.193.142apt_kimsuky
- 123.58.200.110apt_kimsuky
- 125.118.95.227apt_kimsuky
- 138.197.235.123apt_kimsuky
- 138.68.112.220apt_kimsuky
- 139.208.63.224apt_kimsuky
- 5.188.87.194sectoprat
- 94.130.51.119sectoprat
Community reviews
Loading reviews…