NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://193[.]161[.]193[.]99:53112/w[.]sh
● IOC
hxxp://193[.]161[.]193[.]99:53112/w[.]sh
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Oct 6, 2026
Last seen
—
offline
malware download
reported by
wristhulk
Look up on VirusTotal
Linked malware
sh
downloader
Related Indicators
6
url
hxxp://45[.]38[.]249[.]63/bbc
same malware family
url
hxxp://94[.]154[.]43[.]67/ohshit[.]sh
same malware family
url
hxxp://176[.]65[.]139[.]132/c1
same malware family
url
hxxp://176[.]65[.]139[.]132/c2
same malware family
url
hxxp://176[.]65[.]139[.]132/d[.]sh
same malware family
url
hxxp://176[.]65[.]139[.]131/phantom_bash[.]sh
same malware family
Connections
2 relationships
Indicates
2
sh
source
downloader
source