MicroStealer

Malware Family

31 indicators of compromise attributed to MicroStealer across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (2)IPs (1)URLs (4)Hashes (24)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
zarox.karatasyasin058.workers.dev	domain
sk.bumblemovies.com	domain
94.154.43.83	ip
https://sa.microdenmem.workers.dev/m/license-20260921055229-9722	url
https://discord.com/api/webhooks/1556790836333912135/ASzKY2G0UUF1TA6UTTu-Vj5DfcTB3f3Ya18oYcD2XkyglZcaXh910WENDoTJT-q03oIM	url
https://ns.devmicro7.workers.dev/zips/f2d0984b93e808eb.zip	url
https://zarox.karatasyasin058.workers.dev/m/	url
d405153884a919e627f5682af122341b19007c5d1c7ca445642192439cea314d	hash
8dd8e9290fed01c0f7f9fb7e01264368ec8d53ae57b68ce73ad45facc26712f5	hash
9af4e08d55020b4182a411f547214d2092887a727f7ec5ae2ead8045bdccd579	hash
a9782edad95022f6d93c31d76ab364b92423f633779ecce20fd4900d65725691	hash
7f21d4fc92774e7541df31911a565b5593bb1ec244443be4a14b290258f672fb	hash
ba7d9b8cd934038441ad8bb8879a4f4715d532ef3ead83e656491f8da2284f4d	hash
26277ffc2f95f3a64e86e2f5424bbe430fe257be905dc39aab5534533e4cadf1	hash
91b765ec5ae1a0f61cdbbad038c859fe437d062db83af4deacbd694e57b05a6d	hash
5b4a71057e82b3c22f8c585d64ac367f8dc01d12359e432fa9c525253f474e8e	hash
8d02d26723c270467bb9877b815726611701a744fcae335f5f61fc2a9eba1193	hash
15b77bfce146c89b6fa1177af63a1e40e59843ae122e20882b0c0dc17bb7a369	hash
ab976b5230c202d4d61fa56312d409b999197e511bfa240a1b9ff335e7174678	hash
8ba871fd64cfd169e45796004dc8b0cc57d7855142a20daa822a58b4b3691df4	hash
fcb9ccc93559ad0f061e26a4c50759e072c2234728c62416a6e3ea8e4046b0b3	hash
dec0d327c39044523564721608ab551fffeae7af144b9657c367cd47aeb16a7a	hash
5c118f5cfabebab7ff82ba0a4fe9a4aac871da05503f8126f928787f4596f908	hash
5db484db822ac4953655c44a4f83165a2966d45ae4ac5dc6a6679819b19e7310	hash
5688131c6dbe9c8bfef086dd441a588dbf26902d30cdf06cc81518cc25f81f6c	hash
531c8529b26135d768a59d86d254df939ced4485	hash
33f25a90e23674dfbdae66a02f7ccce3	hash

Another file to check? Run a file hash reputation check.