tlp clear · Maltrail IOC for 2026-05-25
Affects tlp clearSource CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-05-25
Indicators of compromise
Domains 563
- clavdiyaivanon.comosx_atomic
- cloudfilebridge.comosx_atomic
- fileamberrocket.sbsosx_atomic
- filecobaltharbor.sbsosx_atomic
- filecometblanket.sbsosx_atomic
- fileechoisland.sbsosx_atomic
- fileembergarden.sbsosx_atomic
- filefalconbridge.sbsosx_atomic
- filefrostengine.sbsosx_atomic
- fileglacierwallet.sbsosx_atomic
URLs 58
- https://api.github.com/repos/stamparm/maltrail/commits/a2e6089817d061250df30343a38157823d568831cyberstrikeai
- https://api.github.com/repos/stamparm/maltrail/commits/463e8cb36ac89ce75892d249062fb86badafd214osx_atomic
- https://api.github.com/repos/stamparm/maltrail/commits/95d80f56d4138b6f76877f3564c909dfacbd47a3android_fvncbot
- https://api.github.com/repos/stamparm/maltrail/commits/7893a0531d401062036b45d7fd8c8baae066121aapt_kimsuky
- https://x.com/skocherhan/status/2058662939301904825apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/01f666b445cc990f7b1e3afb1bbfa4613dfa503easyncrat
- https://x.com/skocherhan/status/2058637967954935824asyncrat
- https://www.virustotal.com/gui/file/72eadebd2f62d9706eaeae182dcb8ccf42919c019deaa812fb2225e005860edd/detectionasyncrat
- https://www.virustotal.com/gui/file/126c4e1ae730a7213e496663f413efad3ab7e8ce0c3bf581b5dc42f3ca246ad2/detectionasyncrat
- https://api.github.com/repos/stamparm/maltrail/commits/66fde3e5e54ab9e307ff99d4f9d5800c921064a1netsupport
IP addresses 18
- 156.232.10.206cyberstrikeai
- 76.13.17.190cyberstrikeai
- 38.190.225.166android_fakeapp
- 38.190.225.167android_fakeapp
- 38.190.225.179android_fakeapp
- 179.43.186.239gosimpletunnel
- 94.125.103.45c2_panel
- 147.93.147.46vacbot
- 147.93.181.178vacbot
- 66.94.114.97vacbot
Community reviews
Loading reviews…