NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://176[.]65[.]139[.]139/launch[.]sh
● IOC
hxxp://176[.]65[.]139[.]139/launch[.]sh
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Sep 8, 2026
Last seen
—
offline
malware download
reported by
von
Look up on VirusTotal
Linked malware
Mozi
script
Mirai
Related Indicators
6
url
hxxp://117[.]223[.]140[.]197:37526/i
same malware family
url
hxxp://27[.]217[.]139[.]36:39257/bin[.]sh
same malware family
url
hxxp://117[.]223[.]140[.]197:37526/bin[.]sh
same malware family
url
hxxp://110[.]36[.]22[.]249:44558/i
same malware family
url
hxxp://110[.]39[.]228[.]78:44625/i
same malware family
url
hxxp://116[.]76[.]206[.]254:50342/bin[.]sh
same malware family
Connections
3 relationships
Indicates
3
Mozi
source
script
source
Mirai
source