Maltrail IOC for 2026-05-28
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-05-28
Indicators of compromise
Domains 358
- 0twjc657tu.v6.navyapt_kimsuky
- 6hnz.t6n0tgju441.v6.navyapt_kimsuky
- bndj4daps7.v6.navyapt_kimsuky
- closecont.casacam.netapt_kimsuky
- dbxtbfvj2t.dns.navyapt_kimsuky
- gr1jt7j8j0s.dns.navyapt_kimsuky
- ipsnver.jumpingcrab.comapt_kimsuky
- nid-naversoc.servemp3.comapt_kimsuky
- nid-token.bumbleshrimp.comapt_kimsuky
- nid.6hnz.t6n0tgju441.v6.navyapt_kimsuky
URLs 39
- https://api.github.com/repos/stamparm/maltrail/commits/aac56e72066aaad298d6778e3ca67fd7fe668b0eapt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/1e2f38f858952f2355a9379e823440d9bbe2e150osx_nova
- https://api.github.com/repos/stamparm/maltrail/commits/3015d9276a01f8f858fa53a235726a4987a10001offloader
- https://api.github.com/repos/stamparm/maltrail/commits/d8e45ee7609376da86adeeb10830785fd7d8fea2osx_atomic
- https://api.github.com/repos/stamparm/maltrail/commits/89f0f47f45651986c6c45b86e8ad645676dc817eosx_atomic
- https://api.github.com/repos/stamparm/maltrail/commits/3879ec39c57ff85f772943e5edc48fc8549c5ab9nexus
- https://api.github.com/repos/stamparm/maltrail/commits/c6447cd15e4c1949a57301ec95406ed6a71d8bcdandroid_roamingmantis
- https://x.com/masaomi346/status/2059891873897230469android_roamingmantis
- https://www.virustotal.com/gui/file/be2f367e4e2d20e52125562a6b888f164509d8e9d22eb7503c3544b1bff6905d/detectionandroid_roamingmantis
- https://api.github.com/repos/stamparm/maltrail/commits/9ee1cc2470660aa5d724ebe9d56aa5e3c52dc1fdc2_panel
IP addresses 6
- 185.254.99.243nexus
- 146.19.213.198c2_panel
- 213.91.211.200hermes_c2
- 144.172.98.102c2_panel
- 194.87.24.4c2_panel
- 38.47.227.212fakeapp
Community reviews
Loading reviews…