URLhaus Database

You are currently viewing the URLhaus database entry for http://utorrent-backup-server.top/update/TPB-1.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3269633
URL: http://utorrent-backup-server.top/update/TPB-1.exe
URL Status:Offline
Host: utorrent-backup-server.top
Date added:2024-11-01 15:21:19 UTC
Last online:2025-01-04 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2025-01-04 14:13:10 UTC to abuse{at}pro-spero[dot]ru)
Takedown time:4 months, 2 days, 16 hours, 37 minutes Bad (down since 2025-03-04 07:59:26 UTC)
Tags:LummaStealer Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-03n/aexe b80b32ff1d730cfc947db68a4fc546576195bf302d1a05eee31b988fd53ea132Virustotal results 54.17% LummaStealer
2025-02-17n/aexe 12b096048be2cca3f61e8fe031efa942faf8f4c31cbafe76953b744537275aceVirustotal results 54.17% LummaStealer
2025-02-03n/aexe 8bc4c1e92cfffe6d52dd7f5c65263e24dbc7bc470dbf631e782afd5e90ef5ee3Virustotal results 33.80% LummaStealer
2025-01-29n/aexe d4fb0e3c1d8a97e3b3baedabd704ef849e7fc96ac1c1b08801585ba4ee11fd29n/a LummaStealer
2025-01-29n/aexe 05d19250d7f78428660571d9f14755b27c1c94b68a7da1916a0909a9ca6c3been/a 
2025-01-18n/aexe 7902e87ab677a55e32d8d354a1b225c67c89c871cdd711771dc5399f57fd6aefn/aLummaStealer
2025-01-04n/aexe 9c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92n/aLummaStealer
2024-12-30n/aexe 72a37e2a65b502af4a3fabf99f069bdb51a50cebb764fb6eb4a1920320dd849cVirustotal results 30.99%Vidar
2024-12-22n/aexe f2c2df5d625c6983881695ab53416c52aa574821e01074f607b6039e5d79e76fVirustotal results 59.72% Vidar
2024-12-15n/aexe 5746d38d3f64fd37ad4aa158d119eec1378e6298bd105323d5ffc791b9f5e88an/aVidar
2024-12-05n/aexe a3a6cde465591377afc5f656f72a00799398fd2541b60391bcb8f62b8f8cace3n/a Vidar
2024-11-27n/aexe b33f25c28bf15a787d41472717270301071af4f10ec93fa064c96e1a33455c35n/a Vidar
2024-11-18n/aexe 98f1e9d201c49c501fdb01a3f325d301dde90facccf219db61a35bf99fa38952n/a Vidar
2024-11-11n/aexe a2798b69026fb2332e89ddd9ba0ddb82b7d658231bf8e4edd2577e25b76a0395n/a Vidar
2024-11-03n/aexe 912320095089137ef3327b9a9682a87966308e44217ab77234e7bf5475496419Virustotal results 55.56% Vidar
2024-11-03n/aexe 912320095089137ef3327b9a9682a87966308e44217ab77234e7bf5475496419Virustotal results 55.56% Vidar
2024-11-01n/aexe 18f5f368c18b9988c7d66abb169d54029cb6316910b109f3e3a4dbcc37a5b59cVirustotal results 80.56%Vidar