NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://192[.]162[.]199[.]249/8jot5vdohds0imt4
● IOC
hxxp://192[.]162[.]199[.]249/8jot5vdohds0imt4
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Aug 12, 2026
Last seen
—
online
malware download
reported by
Ozzxuu
Look up on VirusTotal
Linked malware
stealer
AMOS
macho
macos
Payload
stage2
Related Indicators
6
url
hxxps://www[.]dropbox[.]com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod[.]exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1
same malware family
url
hxxps://www[.]dropbox[.]com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup[.]exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1
same malware family
url
hxxp://192[.]162[.]199[.]249/1vo6lm4y50k3ww0f
same malware family
url
hxxp://192[.]162[.]199[.]249/zeb8cgwmkkpvu7pc
same malware family
url
hxxp://192[.]162[.]199[.]249/1edjop4tlj2d
same malware family
url
hxxp://192[.]162[.]199[.]249/8w6vq50fsu
same malware family
Connections
6 relationships
Indicates
6
stealer
source
AMOS
source
macho
source
macos
source
Payload
source
stage2
source