NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://193[.]161[.]193[.]99:53112/w[.]sh
● IOC

hxxp://193[.]161[.]193[.]99:53112/w[.]sh

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Oct 6, 2026
Last seen
—
offlinemalware downloadreported by wristhulk
Look up on VirusTotal
Linked malware
shdownloader
Related Indicators
6
urlhxxp://45[.]38[.]249[.]63/bbcsame malware familyurlhxxp://94[.]154[.]43[.]67/ohshit[.]shsame malware familyurlhxxp://176[.]65[.]139[.]132/c1same malware familyurlhxxp://176[.]65[.]139[.]132/c2same malware familyurlhxxp://176[.]65[.]139[.]132/d[.]shsame malware familyurlhxxp://176[.]65[.]139[.]131/phantom_bash[.]shsame malware family
Connections
2 relationships
sh
source
downloader
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon