Pulse Detail — Threat Intelligence

PULSE NAME

LofyStealer: Malware targeting Minecraft players. - ZenoX - Artificial Intelligence for Cyber Security

WHITE CyberHunter_NL 2026-04-29 Modified: 2026-05-29

IOCs

LOW VOLUME

A report on LofyStealer, a malicious infostealer targeting Minecraft players, has been published by the Security Research Centre at the University of California, Los Angeles (UCL).

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1012 T1027 T1041 T1055 T1057 T1059 T1071 T1082 T1106 T1132 T1497 T1539 T1555 T1560 T1562 T1049 T1573 T1105 T1218 T1195 T1134

MALWARE FAMILIES

JSON

Indicators of Compromise (7)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	d21a5d08b4614005c8fcd9d0068f0190	—	2026-04-29
FileHash-MD5	fb203c0ac030a97281960d7c28d86ebf	MD5 of f9fe23f24d45eae418c60819c523a83ddba4ca50	2026-04-29
FileHash-SHA1	9b1264eb4ff5ee8f00b8b80341fb6917dc3d3148	—	2026-04-29
FileHash-SHA1	f9fe23f24d45eae418c60819c523a83ddba4ca50	—	2026-04-29
FileHash-SHA256	293006cec43c663ccff331795d662c3b73b4d7af5f8584e2899e286c672c9881	—	2026-04-29
FileHash-SHA256	45d4040e76a0d357dd6e236e185aba2eb82420d78640bfd1f3dede32b33931f7	SHA256 of f9fe23f24d45eae418c60819c523a83ddba4ca50	2026-04-29
URL	http://24.152.36.241:8080	—	2026-04-29

References (1)

↗ https://zenox.ai/en/lofystealer-malware-mirando-jogadores-de-minecraft/