MB-732d975dd11cc538475be1c8241c8073ae4eec0df32dc1943ede5ae6c1b488ad
high
📛 Threat Title
CoinMiner: file
Description
File type: exe. Size: 5242880 bytes. Tags: 81a64890ca97bd87f0c9d35bc6501f4d, CoinMiner, dropped-by-remus, exe. Reporter: Bitsight. First seen: 2026-08-04 20:12:53.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
35171f6f6a1bfee47cbc04cb345c411f
IOC database
- Type
- hash_imphash
- Value
35171f6f6a1bfee47cbc04cb345c411f- First seen
- Last seen
- Attached to this threat
- Appears in
- 19 threats
- Description
- imphash of URLhaus payload 264a6ef8a8853d0e…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
732d975dd11cc538475be1c8241c8073ae4eec0df32dc1943ede5ae6c1b488ad
IOC database
- Type
- hash_sha256
- Value
732d975dd11cc538475be1c8241c8073ae4eec0df32dc1943ede5ae6c1b488ad- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- CoinMiner
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
26d64b316de7e461d0c3feef0f8d11cbf0e63f31
IOC database
- Type
- hash_sha1
- Value
26d64b316de7e461d0c3feef0f8d11cbf0e63f31- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
22adb28d3856d9ede2e24b298f2f6cb8
IOC database
- Type
- hash_md5
- Value
22adb28d3856d9ede2e24b298f2f6cb8- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 5242880 bytes. Tags: 81a64890ca97bd87f0c9d35bc6501f4d, CoinMiner, dropped-by-remus, exe. Reporter: Bitsight. First seen: 2026-08-04 20:12:53.
Remediations (10)
-
web:blog.gridinsoft.com
High CPU, fan noise, GPU spikes, or CoinMiner alert? Learn how to remove coin miner malware, find persistence, and avoid fake utility downloads in 2026.
-
web:forums.malwarebytes.com
I have been Infected with Trojan. Coinminer The coinminer created an exe inside this folder C:\ProgramData\dzxbpzchexga Everytime I delete it it just pop up again with the same name, did everything including windows defender offline scan.
-
web:github.com
Contribute to MicrosoftDocs/defender-docs development by creating an account on GitHub.
-
web:knowledge.broadcom.com
Coinminer protection and removal with Endpoint Protection Coinminers (also called cryptocurrency miners) are programs that generate Bitcoin, Monero, Ethereum, or other cryptocurrencies that are surging in popularity. When intentionally run for one's own benefit, they may prove a valuable source of income. However, malware authors have created threats and viruses which use commonly-available ...
-
web:learn.microsoft.com
Hi, I am Dave, I will help you with this. Download the free version of Malwarebytes, then boot your PC into Safe Mode and run a full scan with Malwarebytes in Safe Mode, that should remove any crypto-miner that may be on your system. After a restart, if you still see a notification about that malware, please provide a screenshot of that notification.
-
web:learn.microsoft.com
Many infections start with: Email messages with attachments that try to install malware. Websites hosting exploit kits that attempt to use vulnerabilities in web browsers and other software to install coin miners. Websites taking advantage of computer processing power by running scripts while users browse the website. Mining is the process of running complex mathematical calculations necessary ...
-
web:malwaretips.com
This guide teaches you how to remove the Trojan:Win32/ CoinMiner virus by following easy step-by-step instructions.
-
web:www.huntress.com
Coinminer removal instructions Manual removal of Coinminer should begin with isolating the affected system. Use trusted EDR solutions or Huntress remediation tools to scan and eliminate the malware. Check system processes for anomalies, disable persistent scheduled tasks, and look for unauthorized modifications in system registries.
-
web:www.malwarebytes.com
If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access. Business remediation How to remove RiskWare. CoinMiner with the Malwarebytes Nebula console
-
web:www.pcrisk.com
COINMINER is a cryptominer - a type of malware that abuses system resources to generate revenue. The primary threats posed by such infections include decreased system performance or failure, data loss, hardware damage, and financial losses.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.