ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://irahook.com/mods/api/log-download.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1849169
IOC: https://irahook.com/mods/api/log-download
IOC Type :url
Threat Type :botnet_cc
Malware: Unknown Stealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-07-13 06:00:24 UTC
Last seen:never
UUID:107f8b6b-7e56-11f1-97fa-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:CuteCraft Downloader IRAHook jar java minecraft stealer

Avatar
Anonymous
CuteCraft/PikaCraft-Mods Java stealer/downloader C2 endpoints (dynamically confirmed via detonation). /get/config returns AES-256/PBKDF2 config; /mods/api/log-download is the beacon+exfil endpoint (key=ira-<8hex>::<profile>). UA irahook-client/1.0; header X-Ira-Id: ira-777-prime.