NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://31[.]77[.]227[.]130:6556/ok
● IOC
hxxp://31[.]77[.]227[.]130:6556/ok
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Aug 12, 2026
Last seen
—
offline
malware download
reported by
NDA0E
Look up on VirusTotal
Linked malware
ascii
Encoded
CoinMiner
base64-loader
XMRIG
Related Indicators
6
url
hxxps://malaysianpastrybakery[.]org/crypted1[.]ps1
same malware family
url
hxxps://drive[.]google[.]com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo
same malware family
url
hxxp://178[.]16[.]53[.]176/OJAK/uzcrypted[.]ps1
same malware family
url
hxxp://178[.]16[.]53[.]176/OJAK/EEcrypted[.]ps1
same malware family
url
hxxp://178[.]16[.]53[.]176/OJAK/UDcrypted[.]ps1
same malware family
url
hxxp://178[.]16[.]53[.]176/DV/aktcrypted[.]ps1
same malware family
Connections
5 relationships
Indicates
5
ascii
source
Encoded
source
CoinMiner
source
base64-loader
source
XMRIG
source