NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxps://64[.]89[.]161[.]65/svchost[.]vbs
● IOC

hxxps://64[.]89[.]161[.]65/svchost[.]vbs

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Oct 5, 2026
Last seen
—
offlinemalware downloadreported by BlinkzSec
Look up on VirusTotal
Linked malware
ua-wgetXWormvbs64-89-161-65
Related Indicators
6
urlhxxp://62[.]60[.]249[.]165/main_x86same malware familyurlhxxp://62[.]60[.]249[.]165/main_mipssame malware familyurlhxxp://62[.]60[.]249[.]165/main_x86_64same malware familyurlhxxp://62[.]60[.]249[.]165/main_mpslsame malware familyurlhxxp://62[.]60[.]249[.]165/main_armsame malware familyurlhxxp://62[.]60[.]249[.]165/main_sh4same malware family
Connections
4 relationships
ua-wget
source
XWorm
source
vbs
source
64-89-161-65
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon