MalwarePublished
Maltrail IOC for 2026-06-27
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-06-27
Indicators of compromise
Domains 528
- docmoise.dynuddns.netapt_kimsuky
- ercmdocload.dynu.netapt_kimsuky
- ipsnave.dynuddns.netapt_kimsuky
- mew-ips.dynu.netapt_kimsuky
- mew-ips.dynuddns.netapt_kimsuky
- moisedc.dynuddns.netapt_kimsuky
- msldnsmh.dynu.orgapt_kimsuky
- msnvlogd.dynu.orgapt_kimsuky
- msvlognps.dynu.orgapt_kimsuky
- nacnhis.dynu.orgapt_kimsuky
URLs 55
- https://api.github.com/repos/stamparm/maltrail/commits/79a0bcfa9c697c622b75b54d796f85b12d92fcd3apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/0eacf571b2a9ae6148d46d1f621b607e4b119455osx_nova
- https://api.github.com/repos/stamparm/maltrail/commits/4d65a4a7e0c3640b2faebd1846f6c7895e59b758cyberstrikeai
- https://api.github.com/repos/stamparm/maltrail/commits/2a86882477743144feea4c81c4a466ee94347e3edcrat
- https://api.github.com/repos/stamparm/maltrail/commits/d300e058cfce332c9bed75cc697704d90a54a0fbdcrat
- https://www.seqrite.com/blog/operation-dragonreturn-china-nexus-cyber-espionage-campaign-targeting-govt-of-india-mof-tax-infrastructure-via-multi-stage-dcrat-deploymentdcrat
- https://api.github.com/repos/stamparm/maltrail/commits/e014835f646a334721926322c776f3036f8236b9fakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/3f75ec7c22ac94b175bf238f0b8b714d1b6734e0fakeapp
- https://x.com/skocherhan/status/2070622153855131829fakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/41d0f9ef383e51605168bd7e9559ff2afcf78918apt_kimsuky
IP addresses 16
- 122.10.115.10cyberstrikeai
- 154.36.188.214cyberstrikeai
- 204.194.54.9dcrat
- 223.26.63.40dcrat
- 144.31.236.240remcos
- 45.119.55.66diztakun
- 202.61.160.201silverfox
- 216.250.104.166diztakun
- 47.76.174.189apt_unclassified
- 144.172.114.163megalodon
Community reviews
Loading reviews…