XMRIG

Malware Family

261 indicators of compromise attributed to XMRIG across abuse.ch threat intelligence feeds.

Domains

23

IPs

187

URLs

35

Hashes

16

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Associated CVEs (1)

Sample indicators

IndicatorType
selfupdate.netdomain
mine.cdnsrv.indomain
abcdefghijklmnopqrst.netdomain
example-probe-does-not-exist-12345.invaliddomain
0x1x2x3.topdomain
cyberknull.comdomain
download.pooping.picsdomain
download.poop-tree.christmasdomain
download.turd-lovers.latdomain
download.poop-diaper.buzzdomain
download.sf8edhuhy8e21juiz8dujh.loldomain
download.dancefloor.topdomain
fix.unknower.windomain
kworker.eth.limodomain
kworker.eth.linkdomain
download.stopbanningmydomains.rudomain
endpoint.project0.ccdomain
updates.officehub.worksdomain
download.skibidibopbop.loldomain
download.businessventure.cvdomain
107.175.89.136ip
62.171.142.134ip
64.89.163.174ip
47.86.190.58ip
95.85.237.226ip
38.207.182.124ip
45.81.243.62ip
47.243.208.30ip
172.104.63.215ip
69.30.251.156ip
175.119.7.220ip
47.253.156.31ip
43.156.71.43ip
158.69.201.163ip
119.194.153.12ip
124.90.54.135ip
31.56.53.172ip
195.205.190.135ip
217.60.7.193ip
179.43.139.82ip
http://puschl.langhaar-schaeferhunde.com/plugins/linux.binurl
http://92.246.139.83/1url
http://194.238.26.34:8880/r8x4k2m9/stager_linux_amd64url
https://s.littleshabby.net/payloads/indexi.pngurl
http://151.243.150.40:8080/static/xmrig-linux-x64url
https://kworker.eth.limo/kworker/apiurl
https://repositoryserver.dpdns.org/linuxshurl
http://45.153.34.212/fakewhiteblack.shurl
http://195.181.245.252:9443/xmrigurl
http://177.104.165.104:9443/xmrigurl
http://200.4.115.1/promocioni3.phpurl
http://92.60.77.99:8888/xmrig-x86url
http://57.129.119.218:13333url
http://cta.edu.pe/wp-content/plugins/linux.binurl
http://45.153.34.212:8181/.rupemnasa/.system3durl
http://176.65.148.250:6556/okurl
http://92.246.139.83/2url
https://cta.edu.pe/wp-content/plugins/linux.binurl
http://151.243.150.40/xmrigurl
http://45.153.34.212:8181/muiecoaieaarchurl