NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/c66d2b77b9e85c53391891212413ad9a99eb66f4b11c6a431e78884a5b2651e5
● IOC

c66d2b77b9e85c53391891212413ad9a99eb66f4b11c6a431e78884a5b2651e5

View graph Watch Export
Type
SHA-256
Source
ThreatFox
First seen
Sep 27, 2026
Last seen
Sep 6, 2026
payloadreported by whack_sh
Look up on VirusTotal
Reported by
1
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto MinerTheHackerNewsSep 6, 2026
Linked malware
CoinMiner
Related Indicators
6
urlhxxp://91[.]92[.]242[.]236/files-129312398/files/file_3fe5ed2d30d53a73[.]exesame malware familyurlhxxp://178[.]16[.]54[.]109/rvn[.]exesame malware familyurlhxxps://www[.]dropbox[.]com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner[.]exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1same malware familyurlhxxp://joker[.]aec944b68370194a50[.]link:6556/ksame malware familyurlhxxp://31[.]77[.]227[.]130:6556/ksame malware familyurlhxxp://31[.]56[.]209[.]189:6556/ksame malware family
Connections
2 relationships
CoinMiner
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon