URLhaus Database

You are currently viewing the URLhaus database entry for http://twizthash.net/newtpp.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3274270
URL: http://twizthash.net/newtpp.exe
URL Status:Offline
Host: twizthash.net
Date added:2024-11-03 16:25:12 UTC
Last online:2025-06-20 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Malware domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-06-18 23:45:12 UTC to erishennya[dot]res{at}gmail[dot]com)
Takedown time:7 months, 19 days, 0 hours, 35 minutes Bad (down since 2025-06-20 17:01:30 UTC)
Tags:CoinMiner exe phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-18newtpp.exeexe 81783b558904becc5b86553faba9525070de5f43339766eb1c025bcfbfe1eef8Virustotal results 81.94% Phorpiex
2025-04-14newtpp.exeexe 8133c11eeec328b9995eec62438ecd87535d540f320beab4642d032661e448b2n/a Phorpiex
2025-04-02newtpp.exeexe 824fc258693bdd485e611fb4ac804af96c2dab12a025ed0b7ed2daebe2e6e0f9n/a CoinMiner
2025-03-16n/aexe 72b19310a8c3cdfc23be1041eb773e6e41a08ec608e53b027b32e05a275b1da9n/a CoinMiner
2025-03-10n/aexe abcd10949a438a7c9d6096d48cfc0fb30d45dffed4b9dd616ac1b51d9783509aVirustotal results 59.72% CoinMiner
2025-03-08n/aexe 2246262e2df5b143d4bff663aceb85d7633ebcb91f2f641c2ab7936c942a8eb2Virustotal results 71.83% Phorpiex
2024-11-12n/aexe d921fc993574c8be76553bcf4296d2851e48ee39b958205e69bdfd7cf661d2b1Virustotal results 59.72% Phorpiex
2024-11-03n/aexe 9eaaadf3857e4a3e83f4f78d96ab185213b6528c8e470807f9d16035daadf33dVirustotal results 85.71% Phorpiex