ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain zarox.karatasyasin058.workers.dev.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1885490
IOC: zarox.karatasyasin058.workers.dev
IOC Type :domain
Threat Type :botnet_cc
Malware: MicroStealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-08-24 07:46:21 UTC
Last seen:never
UUID:78c980ef-9f1f-11f1-a7c1-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:CirrataGame CloudflareWorkers Discord Electron MicroStealer stealer

Avatar
Anonymous
C2/exfil host (Cloudflare Worker) for 'Micro Stealer' (jar.microstealer), distributed as trojanized Electron game 'CirrataGame'. Same infrastructure as URL https://zarox.karatasyasin058.workers.dev/m/. Payload gang.jar SHA-256 59ecb9c1f70ec23f329350c5021591e69304759e648e5e6623a5927102c29637. TLP:CLEAR.