NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://217[.]60[.]36[.]94/william/mort[.]php
● IOC

hxxp://217[.]60[.]36[.]94/william/mort[.]php

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Aug 14, 2026
Last seen
—
offlinemalware downloadreported by josephgerald
Look up on VirusTotal
Linked malware
MoonPeakxenorat
Related Indicators
5
urlhxxp://217[.]60[.]36[.]94/test/test[.]bef_frisame malware familyurlhxxp://217[.]60[.]36[.]94/william/wi[.]txtsame malware familyurlhxxp://217[.]60[.]36[.]94/test/p[.]txtsame malware familyurlhxxp://217[.]60[.]36[.]94/test/t[.]phpsame malware familyurlhxxp://91[.]92[.]40[.]108/winlogon[.]exesame malware family
Connections
2 relationships
MoonPeak
source
xenorat
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon