OP 29 January, 2026 - 02:43 AM
(This post was last modified: 05 March, 2026 - 01:23 AM by Namz_Coder. Edited 6 times in total.)
NAMZM I N E R
SCREENSHOT
Spoiler:
OVERVIEW
NamzMiner is a complete, professional-grade stealth mining suite engineered for large-scale deployment.
It silently mines multiple cryptocurrencies across Windows and Linux machines simultaneously, managed through a modern real-time C2 panel or a Telegram bot.
Windows Stub — silent C# agent deployed on Windows victims
Linux Stub — autonomous worm targeting exposed Linux servers
Electron C2 Panel — full real-time control dashboard (React + TypeScript)
WINDOWS STUB — MINING ENGINE
CPU Mining — XMRig embedded, coin and pool configurable live from C2 with no redeployment
GPU Mining — three automatic profiles based on detected VRAM
Dual Throttle — 90% CPU when user is idle / 20% when user is active: completely transparent
Stop on Battery — automatically pauses mining on laptops running on battery
Stratum Proxy — any bot can act as a private pool proxy for other bots in the network
Auto-Apply — new bot connects and immediately receives the current mining config, zero manual action
GPU Mining — three automatic profiles based on detected VRAM
Dual Throttle — 90% CPU when user is idle / 20% when user is active: completely transparent
Stop on Battery — automatically pauses mining on laptops running on battery
Stratum Proxy — any bot can act as a private pool proxy for other bots in the network
Auto-Apply — new bot connects and immediately receives the current mining config, zero manual action
WINDOWS STUB — STEALTH & PERSISTENCE
Registry Run — silent auto-start on every system reboot
Scheduled Task — alternative persistence via Windows Task Scheduler
Watchdog — automatically relaunches the stub if the process is terminated
AMSI Bypass — patches Windows Defender in memory, disabling scanning at the source
Anti-Analysis — detects and evades sandboxes, Process Hacker, Wireshark and similar tools
User-Mode Rootkit — hides stub and marks the process as a critical system process
Jitter — randomized timing across all routines to evade behavioral detection
WINDOWS STUB — PRIVILEGE ESCALATION
Defender Killer — fully disables Windows Defender through GPO, service termination and exclusions
UAC Bypass — Fodhelper exploit, full elevation with zero UAC prompts
Auto-Elevate — SYSTEM token duplication at ring-3 level (NT/SYSTEM)
Ring 0 Kernel Elevation — loads a vulnerable signed driver, disables DSE, patches the process token to SYSTEM at kernel level. Highest privilege achievable on Windows.
CLIPBOARD HIJACKER — 30 COINS
Silently monitors the clipboard and replaces any copied cryptocurrency address with the attacker's wallet in under 300 milliseconds. Each coin is validated by a dedicated regex pattern before replacement. Wallet addresses are updatable in real time from the C2 without touching the stub.
Supported coins: BTC — ETH — XMR — LTC — SOL — DOGE — TRX — BNB — ADA — DOT — AVAX — MATIC — ATOM — XRP — ALGO — NEAR — FTM — ONE — CRO — APT — SUI — ARB — OP — LINK — UNI — AAVE — XLM — EOS — BCH — DASH
Supported coins: BTC — ETH — XMR — LTC — SOL — DOGE — TRX — BNB — ADA — DOT — AVAX — MATIC — ATOM — XRP — ALGO — NEAR — FTM — ONE — CRO — APT — SUI — ARB — OP — LINK — UNI — AAVE — XLM — EOS — BCH — DASH
HVNC — HIDDEN VIRTUAL DESKTOP
Fully hidden virtual desktop — the victim sees absolutely nothing
Fileless deployment via Process Hollowing — payload streamed in-memory from C2, never written to disk
Complete mouse, keyboard and click passthrough from the C2 panel
Launched and terminated on demand, per bot
WINDOWS STUB — FULL RAT COMMAND SET
Execute hidden shell commands
Upload a file and execute it silently
Download from any URL and execute
Self-update the stub (hot-swap or clean replace with persistence reinstall)
Full silent uninstall
Push updated mining config, clipper wallets, or fallback C2 list to bots live
Start and stop the stratum proxy on any bot
Deploy and kill HVNC (fileless)
Trigger kernel-level or SYSTEM elevation
Multi-fallback C2 — automatically rotates to a backup server if the primary goes offline
Bot Killer — terminates competing RATs and miners on arrival
All traffic AES-encrypted with a per-build polymorphic key
PROPAGATION
- USB Spread — LNK exploit, auto-executes on USB drive insertion
- Zip Spread — injects the stub into ZIP archivesDiscord Worm — mass DM via victim's harvested Discord tokens
LINUX STUB — AUTONOMOUS WORM
Scans 1,000 random public IP addresses per hour, running all exploitation methods in parallel per target. Payload is gzip-compressed and base64-encoded to minimize bandwidth. Rate-limited during business hours to remain under the radar.
Scans 1,000 random public IP addresses per hour, running all exploitation methods in parallel per target. Payload is gzip-compressed and base64-encoded to minimize bandwidth. Rate-limited during business hours to remain under the radar.
- Docker API (port 2375 / 2376, unauthenticated) — creates a privileged container with full host filesystem bind-mount, escapes to the host
- Kubernetes Kubelet (port 10250, unauthenticated) — exec into an existing running pod
- Redis (port 6379, unauthenticated) — injects a cron job via CONFIG SET and SAVE
- SSH — harvests known_hosts keys from the local network, propagates to trusted hosts
Also includes: rootkit, privilege escalation, bot killer, and watchdog.
C2 PANEL — ALL FEATURES
- Dashboard — real-time bot list with hostname, IP, country, CPU, GPU, RAM, OS, live hashrate, mining status, active window, privilege level and infection date. Multi-select and mass commands.
- Mining Tab — configure CPU and GPU profiles, throttle sliders, auto-apply toggle, push config to all or selected bots
- HVNC Viewer — multi-bot live stream with full input control
- Clipper Tab — manage all 30 coin wallets and push updates in real time
- 3D GeoMap — globe visualization of bot geographic distribution
- Analytics — hashrate charts, country and OS breakdown, connection history
- Builder — GUI stub builder, all options configurable, exports a ready-to-deploy executable
- Proxy Bots — list and status of bots running in stratum proxy mode
- Worm Tab — live Linux worm statistics and recent event log
SUPPORTED MINING COINS
Any XMRig-compatible coin — coin, pool and wallet freely configured per bot group.
- XMR (Monero) — RandomX — CPU — highest profitability
- RVN (Ravencoin) — KawPow — GPU
- ETC (Ethereum Classic) — Etchash — GPU
- ERG (Ergo) — Autolykos2 — GPU
- FLUX — ZelHash — GPU
- KAS (Kaspa) — kHeavyHash — GPU
- ZEPH (Zephyr) — RandomX variant — CPU
- RTM (Raptoreum) — GhostRider — CPU
- And many more !
? SPECIAL OFFER - 50% OFF
? For a limited time, get 50% OFF on ALL plans !
? PROMOTIONAL PRICES:
? 1 Month $100 ➜ $50
? 1 Year $750 ➜ $375
⚡ Lifetime $1250 ➜ $625
? For a limited time, get 50% OFF on ALL plans !
? PROMOTIONAL PRICES:
? 1 Month $100 ➜ $50
? 1 Year $750 ➜ $375
⚡ Lifetime $1250 ➜ $625
⏰ Offer valid until March 13, 2026
We've set up an automated shop to make things easier for you, but if possible, before buying, please start a contract to help improve our reputation. ==> [contract=tid]Start Contract[/contract]
![[Image: BIBmnBy.png]](https://i.imgur.com/BIBmnBy.png)
![[Image: hf1F7l1.png]](https://i.imgur.com/hf1F7l1.png)
![[Image: b8DlVjN.png]](https://i.imgur.com/b8DlVjN.png)
![[Image: mJ5DhBJ.png]](https://i.imgur.com/mJ5DhBJ.png)
![[Image: Qy7rksP.png]](https://i.imgur.com/Qy7rksP.png)
![[Image: NOxuAQm.png]](https://i.imgur.com/NOxuAQm.png)
![[Image: bFLTOvx.png]](https://i.imgur.com/bFLTOvx.png)
![[Image: tAuWy7Y.png]](https://i.imgur.com/tAuWy7Y.png)
![[Image: UtTor3o.png]](https://i.imgur.com/UtTor3o.png)
![[Image: giphy.gif]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fmedia1.giphy.com%2Fmedia%2Fv1.Y2lkPTc5MGI3NjExOGo0b2hqejU4ZTNkdTFtYmhxYzFrYmFwMHQ5cTVqcWZ0Z3g2Zm45bSZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw%2FFZ6wIPlwcolRxVgG4h%2Fgiphy.gif)
![[Image: bNx2s.gif]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fs14.gifyu.com%2Fimages%2FbNx2s.gif)
![[Image: 2JnxDz8.png]](https://i.imgur.com/2JnxDz8.png)
![[Image: 890x230.gif]](https://i.ibb.co/1fz96S7b/890x230.gif)
![[Image: ezgif-1d5cb91187223ab8.gif]](https://i.ibb.co/vxKZtnSv/ezgif-1d5cb91187223ab8.gif)