NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://85[.]120[.]255[.]252:8000/csharp[.]exe
● IOC

hxxp://85[.]120[.]255[.]252:8000/csharp[.]exe

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Jul 23, 2026
Last seen
—
offlinemalware downloadreported by hhh088
Look up on VirusTotal
Linked malware
powershellwindows
Related Indicators
6
urlhxxps://malaysianpastrybakery[.]org/crypted1[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/OJAK/uzcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/OJAK/EEcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/OJAK/UDcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/DV/aktcrypted[.]ps1same malware familyurlhxxp://178[.]16[.]53[.]176/DV/ojkcrypted[.]ps1same malware family
Connections
2 relationships
powershell
source
windows
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon