Interesting miner that uses monerohash[.]com, and also queries a bunch of non-existing domains and... VirusTotal and MySpace
https://www.reverse.it/sample/45e063ee91cbf38ee2cf686f02d3d419b07831f1d4fe2aa74fb3e68931742585?environmentId=100 …
Actual C2: 220.181.87[.]80 #miner #moneropic.twitter.com/86Sdokmh5A
10:18 AM - 22 Jan 2018
0 replies
3 retweets
12 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.