URLhaus-PL-b7adeb80df49e2b63fb420082f7a48c68d00a1c2272b80e8115d39f4f94e86cf medium

Description

Malware family: CoinMiner. File type: exe. Size: 5,243,904 bytes. First seen: 2026-09-23 23:55:32.

Indicators of Compromise (5)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• URLhaus payload page URLhaus
• Download sample (ZIP, password: infected) URLhaus

• URLhaus: CoinMiner Malicious URLs | SOC Hunt Feed
  web:davidgodwinpratt.com

  Hunt Hypothesis The detection identifies potential CoinMiner malware distribution through malicious URLs, indicating an adversary may be attempting to deploy cryptocurrency-mining malware across compromised systems. SOC teams should proactively hunt for this behavior in Azure Sentinel to identify and mitigate early-stage attacks that could compromise resource usage and system integrity.

  2026-09-24 04:14 UTC
• URLhaus: CoinMiner Malicious URLs | SOC Hunt Feed
  web:davidgodwinpratt.com

  Hunt Hypothesis The hypothesis is that the detected URLs are being used by adversaries to deploy CoinMiner malware, leveraging compromised or phishing vectors to execute malicious payloads . SOC teams should proactively hunt for these URLs in Azure Sentinel to identify and mitigate potential cryptocurrency mining attacks before they cause significant resource consumption or financial loss.

  2026-09-24 04:14 UTC
• Trojan coinminer keeps comming back - Resolved Malware Removal Logs ...
  web:forums.malwarebytes.com

  Please do all of the requested scans in order and attach all of the results in your next reply.<<<<< Important. Please respond to all future instructions from your helper in a timely manner. Please make the following system changes: If you have not done so already - Enable System Protection and create a NEW System Restore Point <<<<< Important. Temporarily disable your antivirus real-time ...

  2026-09-24 04:14 UTC
• Remove Trojan:Win32/CoinMiner (Virus Removal Guide)
  web:malwaretips.com

  This guide teaches you how to remove the Trojan:Win32/ CoinMiner virus by following easy step-by-step instructions.

  2026-09-24 04:14 UTC
• CoinMiner USB Malware Continues to Spread in Korea
  web:socprime.com

  CoinMiner malware spreads via USB shortcuts in South Korea, using VBS/BAT droppers to deploy PrintMiner and XMRig miners; learn detection and response.

  2026-09-24 04:14 UTC
• URLhaus | CoinMiner
  web:urlhaus.abuse.ch

  In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as CoinMiner .

  2026-09-24 04:14 UTC
• URLhaus | CoinMiner
  web:urlhaus.abuse.ch

  URLhaus Database Malware URLs on URLhaus are usually associated with certain tags. Every URL can be associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware URLs. The page below gives you an overview on malware URLs that are tagged with CoinMiner . Database Entry

  2026-09-24 04:14 UTC
• Coinminer Malware: Analysis, Detection, Removal | Huntress
  web:www.huntress.com

  Coinminer removal instructions Manual removal of Coinminer should begin with isolating the affected system. Use trusted EDR solutions or Huntress remediation tools to scan and eliminate the malware. Check system processes for anomalies, disable persistent scheduled tasks, and look for unauthorized modifications in system registries.

  2026-09-24 04:14 UTC
• Trojan:Win32/CoinMiner threat description - microsoft.com
  web:www.microsoft.com

  We have seen it use the following file names: amd_gpu. exe cg. exe minerd. exe svchost. exe Payload Mines bitcoins This threat installs and launches bitcoin mining software on your PC. It launches the mining software silently and passes to it parameters that let it send its results to a server controlled by a malicious hacker

  2026-09-24 04:14 UTC
• CoinMiner - Point Wild
  web:www.pointwild.com

  Introduction CoinMiner is a high-risk malware categorized as a cryptojacker — malicious software designed to hijack a victim's system resources to mine cryptocurrency without their consent. First identified in the wild several years ago, this malware targets Windows operating systems, silently degrading system performance while financially benefiting the attacker. What Does CoinMiner Do ...

  2026-09-24 04:14 UTC

Only Available for Registered Users. Sign in to view.