Skip to main content

MicroStealer

Malware Family

25 indicators of compromise attributed to MicroStealer across abuse.ch threat intelligence feeds.

Domains

2

IPs

1

URLs

2

Hashes

20

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CPayload Delivery

Sample indicators

IndicatorType
zarox.karatasyasin058.workers.devdomain
sk.bumblemovies.comdomain
94.154.43.83ip
https://zarox.karatasyasin058.workers.dev/m/url
https://ns.devmicro7.workers.dev/zips/f2d0984b93e808eb.zipurl
59ecb9c1f70ec23f329350c5021591e69304759e648e5e6623a5927102c29637hash
d405153884a919e627f5682af122341b19007c5d1c7ca445642192439cea314dhash
8dd8e9290fed01c0f7f9fb7e01264368ec8d53ae57b68ce73ad45facc26712f5hash
9af4e08d55020b4182a411f547214d2092887a727f7ec5ae2ead8045bdccd579hash
a9782edad95022f6d93c31d76ab364b92423f633779ecce20fd4900d65725691hash
7f21d4fc92774e7541df31911a565b5593bb1ec244443be4a14b290258f672fbhash
ba7d9b8cd934038441ad8bb8879a4f4715d532ef3ead83e656491f8da2284f4dhash
26277ffc2f95f3a64e86e2f5424bbe430fe257be905dc39aab5534533e4cadf1hash
8affbb4a04373dee6a02c44e09f7bb644aa224adfac81eb330457a358df4fe29hash
91b765ec5ae1a0f61cdbbad038c859fe437d062db83af4deacbd694e57b05a6dhash
5b4a71057e82b3c22f8c585d64ac367f8dc01d12359e432fa9c525253f474e8ehash
8d02d26723c270467bb9877b815726611701a744fcae335f5f61fc2a9eba1193hash
15b77bfce146c89b6fa1177af63a1e40e59843ae122e20882b0c0dc17bb7a369hash
ab976b5230c202d4d61fa56312d409b999197e511bfa240a1b9ff335e7174678hash
8ba871fd64cfd169e45796004dc8b0cc57d7855142a20daa822a58b4b3691df4hash
fcb9ccc93559ad0f061e26a4c50759e072c2234728c62416a6e3ea8e4046b0b3hash
a5e104d31c889e9f9ffcb82625f261cd8fa618f5c2e36ae4a62caf37097b7d64hash
dec0d327c39044523564721608ab551fffeae7af144b9657c367cd47aeb16a7ahash
5c118f5cfabebab7ff82ba0a4fe9a4aac871da05503f8126f928787f4596f908hash
5db484db822ac4953655c44a4f83165a2966d45ae4ac5dc6a6679819b19e7310hash

Another file to check? Run a file hash reputation check.