Coinminer

Malware Family

7 585 indicators of compromise attributed to Coinminer across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

7 542

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (3)IPs (2)URLs (38)Hashes (7 542)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
yuming.zx-infinity.space	domain
www.osmb.net	domain
osbot.net	domain
82.23.163.207	ip
195.26.86.171	ip
http://103.36.80.114/info.zip	url
http://121.184.128.134/01/info.zip	url
http://178.61.160.6:5001/video.scr	url
http://103.206.139.61/info.zip	url
http://103.59.134.98/info.zip	url
http://67.177.204.82:8081/av.scr	url
http://103.206.139.61/Video.scr	url
http://103.59.134.98/Photo.scr	url
http://180.148.33.24/Photo.scr	url
http://111.59.254.165:8084/20250703/photo.scr	url
https://ralph-schinagl.com/Photo.scr	url
http://178.61.160.6:5001/info.zip	url
http://103.8.164.18/info.zip	url
http://31.77.144.86:49104/ddb64.dll	url
http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/base/info.zip	url
http://156.200.99.139/av.scr	url
http://177.70.102.232:8070/TmpFTP/01/Consulta/2019-08-02/info.zip	url
http://116.58.62.74/info.zip	url
https://www.osmb.net/OSMB.jar	url
http://111.235.143.155:8080/Photo.scr	url
b2e27f70d33fce7c036f221ce6b2249b63eb465b1c0abdfcbeea0f7585884448	hash
eb3b0390f06a0c13383c7478f4f1a55520a31b8668141b3b2792c371e7bcba69	hash
a2c042f9db2a3e0634378ad4ce85269f97167438754e5e9f059a3c58c25b1cae	hash
882cd8797f417c8898ee087d0ad158ac7b61ac41dd9cb82d0fd26cd55d7fe75e	hash
db0ed0e7a29ace4dd055f704a1d14c35a76f73fa40fb70ac9a03cca44864365b	hash
b5d5be601398f8adcad9083ee4f1145e383d22e8a8aab7c8e8e5d059b629beb2	hash
c0ed98d08381257b540a04c0868ecd6a628649aa70febcbe03778bae532fb5be	hash
ef097625e06e1a6270a20decd87387ff48d1235406caefb6c0b64f8044c1a461	hash
75b7480830830bb47e35db46bbb4cf73	hash
50c28be7bb31155d51a7d682242b7da6620ed8f6842319cec2a0655a3ff025dc	hash
8e8f2d833a83db1dbc9e699b9e719993603e39e069b97d19763b9895a1bb035e	hash
7bb8d00e98c432d123ca538aa4af62a24d927d4cf73aa8ec4bf4798d6f94fe25	hash
656b90c4553ec077f0ff60bf35edee765dffa4d63d4e2148221f9ef1171bb437	hash
ed8fa7b7b1fbd7fa1100d52617db6c07c9a23b39f834b497f28b2633766d8a4c	hash
c0d0134c2eeeefcee6cf7cac7ba8a4ec468e1beab7ffd35ec24cbe3f8f6136fc	hash
b797314a01c3bdf6aba0229f409b3c0ff1d28d57cc126ed8eaebfc2a6de951c9	hash
366b88c9d03a02d78217b6f707a34f7d8592a60b2d08ef66845698c304837de0	hash
a8eedaa9a5d431baf445c8080ac35fda	hash
b754418c18490b4f4f4a4b7c6424353a61994a4b344167b7f9e1370191339b30	hash
7b3490f8e6e987badc243711d591544d535383d8cedd23421084f97bda84c17a	hash

Another file to check? Run a file hash reputation check.