NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxps://hjha[.]ao/new/secured_stub[.]ps1
● IOC
hxxps://hjha[.]ao/new/secured_stub[.]ps1
View graph
Watch
Export
Type
URL
Sources
URLhaus
ThreatFox
First seen
Oct 1, 2026
Last seen
—
offline
malware download
reported by
abuse_ch
Look up on VirusTotal
Linked malware
opendir
ascii
powershell
ps1
Unknown malware
Related Indicators
6
url
hxxp://95[.]155[.]151[.]113/t
same malware family
url
hxxp://95[.]155[.]151[.]113/tbk_stage1[.]sh
same malware family
url
hxxp://150[.]241[.]65[.]212:889/pito[.]arm7
same malware family
url
hxxp://150[.]241[.]65[.]212:889/pito[.]sh4
same malware family
url
hxxp://150[.]241[.]65[.]212:889/pito[.]i686
same malware family
url
hxxp://150[.]241[.]65[.]212:889/pito[.]arm5
same malware family
Connections
5 relationships
Indicates
5
opendir
source
ascii
source
powershell
source
ps1
source
Unknown malware
source