NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://31[.]77[.]227[.]130:6556/ok
● IOC

hxxp://31[.]77[.]227[.]130:6556/ok

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Aug 12, 2026
Last seen
—
offlinemalware downloadreported by NDA0E
Look up on VirusTotal
Linked malware
asciiEncodedCoinMinerbase64-loaderXMRIG
Related Indicators
6
urlhxxps://malaysianpastrybakery[.]org/crypted1[.]ps1same malware familyurlhxxps://drive[.]google[.]com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNosame malware familyurlhxxp://178[.]16[.]53[.]176/OJAK/uzcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/OJAK/EEcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/OJAK/UDcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/DV/aktcrypted[.]ps1same malware family
Connections
5 relationships
ascii
source
Encoded
source
CoinMiner
source
base64-loader
source
XMRIG
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon