s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-MAL-js.cryptonight

📛 Threat Title

Malware family: CryptoNight

Category: CryptoNight First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `js.cryptonight`. Printable name: CryptoNight.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain js.cryptonight VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/js.cryptonight

IOC database

Type
domain
Value
js.cryptonight
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat TF-MAL-js.cryptonight

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/js.cryptonight

References (1)

Remediations (9)

  • web:forums.malwarebytes.com

    good Morning, often find this process that occupies the cpu 100%. I delete the task but after some time it reappears. Malwarebytes detects it deletes it but then reappears. Thanks for your help. I enclose the file that Farbar wrote. FRST.txt Scan result of Farbar Recovery Scan Tool (FRST.txt) (x6...

  • web:knowledge.broadcom.com

    However, malware authors have created threats and viruses which use commonly-available mining software to take advantage of someone else's computing resources (CPU, GPU, RAM, network bandwidth, and power), without their knowledge or consent (i.e. cryptojacking). Symantec's video What is Cryptojacking? provides a three-minute overview of this ...

  • web:learn.microsoft.com

    These coin miners aren't wanted in enterprise environments because they eat up precious computing resources. Cybercriminals see an opportunity to make money by running malware campaigns that distribute, install, and run trojanized miners at the expense of other people's computing resources.

  • web:success.trendmicro.com

    Learn how you can protect your system from MALXMR Cryptocurrency-mining Malware using your Trend Micro product.

  • web:www.breachsense.com

    Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  • web:www.cisa.gov

    It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  • web:www.huntress.com

    Cryptonight malware is a type of cryptocurrency-mining software designed to hijack system resources and stealthily mine cryptocurrency—most commonly Monero—without the user's consent. Often categorized as a trojan or malicious script, it leverages infected systems' CPU power to generate profits for attackers while causing excessive wear on the victim's hardware. Cryptonight's ...

  • web:www.ncsc.gov.uk

    How to defend organisations against malware or ransomware attacks.

  • web:www.pcrisk.com

    STEP 1. Manual removal of JS:CryptoNight malware . STEP 2. Check if your computer is clean. How to remove malware manually? Manual malware removal is a complicated task - usually it is best to allow antivirus or anti- malware programs to do this automatically. To remove this malware we recommend using Combo Cleaner Antivirus for Windows.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.