Maltrail IOC for 2026-08-02
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-08-02
Indicators of compromise
Domains 485
- xmr.novoline.topcrypto_mining
- pool.novoline.topcrypto_mining
- cdn.boauis.icuandroid_fvncbot
- lqozaa.icuandroid_fvncbot
- cmioser.dynu.netapt_kimsuky
- gama.dynu.orgapt_kimsuky
- gama.dynuddns.comapt_kimsuky
- gama.dynuddns.netapt_kimsuky
- nhis.gama.dynu.orgapt_kimsuky
- nhis.gama.dynuddns.comapt_kimsuky
URLs 11
- https://api.github.com/repos/stamparm/maltrail/commits/415afcf9a3ded889d4003c7b81b5a06d7f9d255ecrypto_mining
- https://api.github.com/repos/stamparm/maltrail/commits/d074c60f7f0812e09087101d5cc7bf448ab93ebfcrypto_mining
- https://www.virustotal.com/gui/file/00c854e09c22bdc694d06705755c339fc91060024681a43dbbd89f997d363c80/detectioncrypto_mining
- https://api.github.com/repos/stamparm/maltrail/commits/959f565dcf3b038b912919e6a67a7e42c51219d3android_fvncbot
- https://api.github.com/repos/stamparm/maltrail/commits/7aa8c0b73f31a8c454c564e062c25560469afb48apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/e49562b310de04c37851621f03c0931f878b4840lummac2
- https://api.github.com/repos/stamparm/maltrail/commits/105e0555295462dd0bf29e88ccfdbc97bf813beequestealer
- https://x.com/Fact_Finder03/status/2083830701536039256questealer
- https://www.virustotal.com/gui/file/1b5f9416759d2d41171c0b36c702ae8b5ba2fefba14f58d9e0f21c25ed255e4a/detectionquestealer
- https://api.github.com/repos/stamparm/maltrail/commits/0e2e509d345917b086c54712545e16fd64ce3fa5voog
IP addresses 4
- 88.156.30.96crypto_mining
- 2.26.123.89evilginx
- 20.82.124.87evilginx
- 37.148.134.208evilginx
Community reviews
Loading reviews…