TLP:WHITE112 IOCs
Maltrail IOC for 2026-07-29
Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise112
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | msdtnsmsu.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | k8adm.huoshan.sbs indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | niujaus.com indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | accident.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ncodgvcheck.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | luodi.huoshan.sbs aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 145.63.138.63 malwarenetworkrat | High | 72 | Jul 29, 26 |
| SHA1 | 9f161fede995485295fd9ba237af66efa9531d23 file-hashindicatormalware | High | 72 | Jul 29, 26 |
| Domain | kali.huoshan.sbs indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | usrprofileoptions.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.account.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | moscop.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 103.118.42.79 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | ncodhaverify.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | joiewq.icu indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | about.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| SHA1 | 176f0c7647b466722b3adb6159b38df2646ea0cd aptespionagefile-hash | High | 72 | Jul 29, 26 |
| Domain | nipsverifications.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | cnhisrps.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | gulderopre.club aptespionageloader | High | 72 | Jul 29, 26 |
| Domain | cdn.keoenxa.icu loadermalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | agent-old-export.zeabur.app indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | edocservice-kakao.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 89.124.93.136 aptespionagemalware | High | 72 | Jul 29, 26 |
| SHA1 | 7c36f7920f4c2e71fb18fc97f68f2f972313f634 file-hashmalwarerat | High | 72 | Jul 29, 26 |
| Domain | nhis.able.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | edoc.view.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis-edoc-cigarette.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ncodgtcheck.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | pvcntse.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 38.95.74.4 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | app.donply.pw aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ntclos.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nlskghsu.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 46.225.113.75 botnetmalwarenetwork | High | 86 | Jul 27, 26 |
| IP | 43.156.118.105 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | nhis.abuse.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | pqwoaa.icu indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | accident.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | msutsidmc.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.about.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhisotps.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | inrestrictblocks.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | publishndocs.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | snkenafse.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| SHA1 | 3e1fe536e464bde5f868331a3aeb6e4f8718af1b file-hashindicatormalware | High | 72 | Jul 29, 26 |
| Domain | usrprofileoption.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | smchecksm.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.account.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | hsnivnidl.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 23.95.130.140 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| IP | 38.55.132.229 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | nlsdtime.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.abuse.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | hslnistms.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhpayrestrict.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | account.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | view.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | hunherbal.com aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | noisebait.space loadermalwarenetwork | High | 72 | Jul 29, 26 |
| SHA1 | d4ae22ca8a94e5fa87d270f1fb629f7d0c41ff0a file-hashloadermalware | High | 72 | Jul 29, 26 |
| Domain | auction.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | markthunder.xyz loadermalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | nsmcihsd.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.edoc.view.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | moisedow.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| SHA1 | 55df262fc55d0e203c1498f25e19527a3f770343 file-hashloadermalware | High | 72 | Jul 29, 26 |
| Domain | abuse.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | agent-pppp.zeabur.app indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| IP | 145.63.138.87 malwarenetworkrat | High | 72 | Jul 29, 26 |
| Domain | nhis-edoc-sign.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | absorb.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 2.24.128.29 malwarenetworkrat | High | 72 | Jul 29, 26 |
| Domain | shop.favnshield.fun aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | shootspirit.monster indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | flintazimuth.top indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| IP | 181.215.205.246 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | account.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | msdnsmt.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ncodhancheck.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ncodhanpass.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.accident.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | locnhis.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | moisedow.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | vipsdoc.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| IP | 38.76.201.231 indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | opcnhis.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | able.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ncodgxcheck.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.edoc.abstract.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | abandon.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | abstract.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | snailsreading.xyz loadermalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | mlsintms.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | edoc.abstract.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| SHA1 | 598c331b4716422849e2ab62392861ae69d07580 aptespionagefile-hash | High | 72 | Jul 29, 26 |
| Domain | koewna.icu indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| Domain | nhsintdle.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | huoshan.sbs indicatormalwarenetwork | High | 72 | Jul 29, 26 |
| SHA1 | 3c272e0ca10b8cdeb40d73bfa89e2d38e0ea883c aptespionagefile-hash | High | 72 | Jul 29, 26 |
| Domain | arcyloriantech.com aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.accident.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.abandon.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | country-selected.com malwarenetworkrat | High | 72 | Jul 29, 26 |
| Domain | nhis.about.dynu.net aptespionagemalware | High | 72 | Jul 29, 26 |
| SHA1 | 7c601edeef2fde8e0cf59c4f75886769efac7be5 file-hashindicatormalware | High | 72 | Jul 29, 26 |
| Domain | msnhor.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | urovitalmagyar.com aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | nhis.absorb.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | about.dynuddns.net aptespionagemalware | High | 72 | Jul 29, 26 |
| Domain | ncodguverify.dynu.org aptespionagemalware | High | 72 | Jul 29, 26 |
IOC Relationship Graph
IOC Relationship Graph112 total IOCs
DomainIPSHA1