MB-b19eb2605a969acda3bd284d2376acc657c3a556d4c81ce17eaaabe39d48b990
high
📛 Threat Title
CoinMiner: file
Description
File type: exe. Size: 11776 bytes. Tags: CoinMiner, dropped-by-phorpiex, exe. Reporter: Bitsight. First seen: 2026-08-04 21:25:07.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
42cf01d41ef6dc0627982490afc9cddd
IOC database
- Type
- hash_imphash
- Value
42cf01d41ef6dc0627982490afc9cddd- First seen
- Last seen
- Attached to this threat
- Appears in
- 38 threats
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
b19eb2605a969acda3bd284d2376acc657c3a556d4c81ce17eaaabe39d48b990
IOC database
- Type
- hash_sha256
- Value
b19eb2605a969acda3bd284d2376acc657c3a556d4c81ce17eaaabe39d48b990- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- CoinMiner
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
712ab4371b1979c2104280e21e57842a70ab9f63
IOC database
- Type
- hash_sha1
- Value
712ab4371b1979c2104280e21e57842a70ab9f63- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
994bceb67f526c2ad2a4d4d304bf0cb8
IOC database
- Type
- hash_md5
- Value
994bceb67f526c2ad2a4d4d304bf0cb8- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 11776 bytes. Tags: CoinMiner, dropped-by-phorpiex, exe. Reporter: Bitsight. First seen: 2026-08-04 21:25:07.
Remediations (10)
-
web:forums.malwarebytes.com
I have been Infected with Trojan. Coinminer The coinminer created an exe inside this folder C:\ProgramData\dzxbpzchexga Everytime I delete it it just pop up again with the same name, did everything including windows defender offline scan.
-
web:github.com
Contribute to MicrosoftDocs/defender-docs development by creating an account on GitHub.
-
web:knowledge.broadcom.com
Coinminer protection and removal with Endpoint Protection Coinminers (also called cryptocurrency miners) are programs that generate Bitcoin, Monero, Ethereum, or other cryptocurrencies that are surging in popularity. When intentionally run for one's own benefit, they may prove a valuable source of income. However, malware authors have created threats and viruses which use commonly-available ...
-
web:learn.microsoft.com
Hi, I am Dave, I will help you with this. Download the free version of Malwarebytes, then boot your PC into Safe Mode and run a full scan with Malwarebytes in Safe Mode, that should remove any crypto-miner that may be on your system. After a restart, if you still see a notification about that malware, please provide a screenshot of that notification.
-
web:learn.microsoft.com
Many infections start with: Email messages with attachments that try to install malware. Websites hosting exploit kits that attempt to use vulnerabilities in web browsers and other software to install coin miners. Websites taking advantage of computer processing power by running scripts while users browse the website. Mining is the process of running complex mathematical calculations necessary ...
-
web:malwaretips.com
CoinMiner /BAT.Generic is a heuristic detection designed to generically detect a Trojan Horse.
-
web:malwaretips.com
This guide teaches you how to remove the Trojan:Win32/ CoinMiner virus by following easy step-by-step instructions.
-
web:www.huntress.com
Coinminer malware is a form of crypto-mining malware. that covertly utilizes a victim's computing resources to mine cryptocurrency, such as Monero or Bitcoin. Also known as cryptojacking malware, it typically operates in the background, consuming processing power. Its threat level varies depending on the scale of the infection, but widespread attacks can cripple business operations.
-
web:www.malwarebytes.com
Business remediation How to remove Trojan. CoinMiner with the Malwarebytes Nebula console You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints. Nebula endpoint tasks menu Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.
-
web:www.pcrisk.com
COINMINER is a cryptominer - a type of malware that abuses system resources to generate revenue. The primary threats posed by such infections include decreased system performance or failure, data loss, hardware damage, and financial losses.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.