NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxps://donutclients[.]st/Shulker_Box_Tooltip-26[.]2[.]jar
● IOC
hxxps://donutclients[.]st/Shulker_Box_Tooltip-26[.]2[.]jar
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Oct 7, 2026
Last seen
—
online
malware download
reported by
wok
Look up on VirusTotal
Linked malware
stealer
jar
java
vm
Related Indicators
6
url
hxxps://www[.]dropbox[.]com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod[.]exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1
same malware family
url
hxxps://www[.]dropbox[.]com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup[.]exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1
same malware family
url
hxxp://192[.]162[.]199[.]249/8jot5vdohds0imt4
same malware family
url
hxxp://192[.]162[.]199[.]249/1vo6lm4y50k3ww0f
same malware family
url
hxxp://192[.]162[.]199[.]249/zeb8cgwmkkpvu7pc
same malware family
url
hxxp://192[.]162[.]199[.]249/1edjop4tlj2d
same malware family
Connections
4 relationships
Indicates
4
stealer
source
jar
source
java
source
vm
source