URLhaus Database

You are currently viewing the URLhaus database entry for http://twizt.net/tdrp.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3231110
URL: http://twizt.net/tdrp.exe
URL Status:Offline
Host: twizt.net
Date added:2024-10-12 05:38:06 UTC
Last online:2024-12-20 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Botnet C&C domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-12-20 07:39:21 UTC to automatic-abuse{at}eliteteam[dot]to)
Takedown time:6 months, 18 days, 5 hours, 4 minutes Bad (down since 2025-04-28 10:43:42 UTC)
Tags:32 CoinMiner exe phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aexe abcd10949a438a7c9d6096d48cfc0fb30d45dffed4b9dd616ac1b51d9783509aVirustotal results 59.72% CoinMiner
2024-11-02n/aexe 02b5e6fb84a77ee243f648f0ab29835be6463c4a96512972f825c146b67624f0Virustotal results 22.22% Phorpiex
2024-11-01n/aexe 5cf2728fb87906bdd33904877b4e9cd73fff94c72a746f8df8e681d6340eaf5cVirustotal results 30.56% Phorpiex
2024-10-31n/aexe df77ec8288605bc4df2d9b5f3bcd711607d418ac8485cbf8247eae64ed307bc8n/a Phorpiex
2024-10-31n/aexe 1fee72e10f20289ae0fef274c7a2b4fd1631dedd9c19dbce01ade3ee25bb9acfVirustotal results 30.99% Phorpiex
2024-10-30n/aexe 06d07847e64f71b8d73b54d9202521d0ca2dd399553a4a93eb28f8cb24475c34n/a Phorpiex
2024-10-29n/aexe c78dbe4a72a670d787589eaa994436b1da205496d11f8f9340cedaccd5f8e930Virustotal results 23.61% Phorpiex
2024-10-29n/aexe aca18e5b9cdb01ad9ad8c97fb6d43b6caa7759464f62007a7953b7dc8b54762en/a Phorpiex
2024-10-28n/aexe 6fc8b5b8a90cf8ba7e0eb930fcdde776f8eeb3f37913318df7766a365e13fa8eVirustotal results 26.03%Phorpiex
2024-10-27n/aexe 0d047b7e3d8841a58253b9f32eb62c6c6aa735905839233edcd277ffb5246340n/a CoinMiner
2024-10-26n/aexe 84eaf3c48a49c2604f28a9b9ef6ce47df9aef7c8d1b7da710dd6c34d1a4d05ceVirustotal results 26.39% Phorpiex
2024-10-25n/aexe fdbf0c19ebcafcf5e4295edc9e4a37836ba580b9a4d63b2a9ccdf8418ed5fe84Virustotal results 24.66%CoinMiner
2024-10-23n/aexe 3c5aabcc50acb64d8d3c019a1aa92ccf0e1cdcf5c147f957541a83d8ba2c54d3Virustotal results 21.67% Phorpiex
2024-10-22n/aexe 081aad3c69c4aac4038954bd304dd8084cf1acdef4518e68d0749ed004263a86Virustotal results 28.77% Phorpiex
2024-10-22n/aexe c299320418041b3f8c3503f764ebdbb34acc69ef909f125bccb8e3f741a3b650Virustotal results 10.96% Phorpiex
2024-10-21n/aexe 832182f21a80bb855ba7195496fb6f71dd217b690de8b4214d4ba323d2cd5333n/a CoinMiner
2024-10-20n/aexe 0120a8cec2771cf3845e4aadc71e81d33764d653e89cf870ffdf0f8111e31d7en/a CoinMiner
2024-10-19n/aexe 0009cf6aee9170cdb01c8bd02506b0b0d8efbdeddc82389bce1a10f43c32fc5bVirustotal results 41.10% Phorpiex
2024-10-18n/aexe ada49c1b3b3d878fe42df213844d8d37ec59ac4f906060556ad901ba0d55b2a9Virustotal results 41.10% Phorpiex
2024-10-17n/aexe d7e065218eec99d689785386d0da9a8011ab76313d2bc0d03725d4a8f7c244d4n/a Phorpiex
2024-10-15n/aexe 8c8ef3881ab44057b4972c9112f73e334c664dace19295c5755f5a38ea6191d7Virustotal results 41.10% Phorpiex
2024-10-12n/aexe 7a0b4618a6891eb2c01af350236f246c9359e7e0b54003fa1ed3216fa2200c57n/a Phorpiex
2024-10-12n/aexe 8de13f64aab532c0bbd3d38cc821ba6fa67ccfadde9cffd14944cc9d85830f4aVirustotal results 68.49%Phorpiex