🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://nomore.quest/questremoval.exe.

Database Entry


IOC ID:1931162
IOC: https://nomore.quest/questremoval.exe
IOC Type :url
Threat Type :payload_delivery
Malware: xmrig
Confidence Level : Confidence level is high (95%)
Is compromised? : True
ASN:AS16509 AMAZON-02
Country:- US
First seen:2026-09-24 04:58:11 UTC
Last seen:never
UUID:800c5753-b7b8-11f1-abee-42010aa4000a
Reporter whack_sh
Reward 5 credits from ThreatFox
Tags:Dropper exe xmrig

Avatar
whack_sh
Multi-vantage capture (datacenter/residential/mobile); payload SHA-256 b9f239f6670f52d74ed55d1fbe7ca02feca1387e7aacd329abbcd1cf114e2b7d; partner feed labels it xmrig; 42 VirusTotal engines malicious; re-verified serving the same bytes at submission time