THE HUNTER’S LEDGER
IOC Feed
NsMiner: Multi-Stage Cryptojacking Operation
28 indicators extracted from this investigation's feed. Filter by type, then copy or download exactly what is on screen.
28 shown
TypeIndicator
ipv4 110.188.25.10
ipv4 116.62.22.10
ipv4 13.180.6.10
ipv4 134.211.96.10
ipv4 136.0.88.10
ipv4 141.227.248.10
ipv4 162.150.119.10
ipv4 202.24.217.10
ipv4 214.192.190.10
ipv4 223.50.252.10
ipv4 45.156.140.10
ipv4 56.255.40.10
ipv4 63.192.224.10
ipv4 85.230.83.10
ipv4 94.158.41.10
domain hrtests.ru
domain testswork.ru
url http://hrtests.ru/S.php
sha256 40fe74d3a1116ed8ca64c62feb694327a414059eeaef62c28bc5917e2e991b3d
sha256 42422d912b9c626ad93eb8c036ad82ee67cfa48cf75259c20c327eddd4cc376f
sha256 572a6f9cb5b37b6eec13b578d346c2568ce3ec88bb711d75dac9e82fc01c8860
sha256 67eff17c53a78c8ec9a28f392b9bb93df3e74f96f6ecd87a333a482c36546b3e
sha256 a0eba3fda0d7b22a5d694105ec700df7c7012ddc4ae611c3071ef858e2c69f08
sha256 d0326f0ddce4c00f93682e3a6f55a3125f6387e959e9ed6c5e5584e78e737078
sha256 e06aa8ce984b22dd80a60c1f818b781b05d1c07facc91fec8637b312a728c145
path C:\Users\\AppData\Local\Temp\info.zip
path C:\Users\\AppData\Local\Temp\tftp.exe
path C:\Users\\AppData\Roaming\NsMiner\

Every recognisable value in this feed is shown above. The raw JSON additionally carries the analyst context, confidence and MITRE mapping for each one.

Licensed CC BY 4.0, free to use commercially with attribution to The Hunters Ledger.