NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://193[.]178[.]158[.]107/bin/189e7e8ebfcbd873_CryptoClipper[.]exe
● IOC

hxxp://193[.]178[.]158[.]107/bin/189e7e8ebfcbd873_CryptoClipper[.]exe

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Sep 12, 2026
Last seen
—
offlinemalware downloadreported by Bitsight
Look up on VirusTotal
Linked malware
dropped-by-StealcLoaded
Related Indicators
6
urlhxxp://87[.]120[.]104[.]147:8080/d/installer-4same malware familyurlhxxps://tarkioweb[.]com/crypted[.]exesame malware familyurlhxxps://dasberlinerhotel[.]com/wp-content/uploads/update[.]exesame malware familyurlhxxps://www[.]dropbox[.]com/scl/fi/e8fjth5km9ncp252hrjq5/main[.]exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1same malware familyurlhxxps://www[.]dropbox[.]com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner[.]exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1same malware familyurlhxxps://brandtinoda[.]com/wp-content/uploads/2026/ovdbot[.]exesame malware family
Connections
2 relationships
dropped-by-Stealc
source
Loaded
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon