URLhaus Database

You are currently viewing the URLhaus database entry for http://utorrent-backup-server3.top/update//TPB-1.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3351913
URL: http://utorrent-backup-server3.top/update//TPB-1.exe
URL Status:Offline
Host: utorrent-backup-server3.top
Date added:2024-12-16 11:18:22 UTC
Last online:2025-01-05 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2025-01-04 14:20:14 UTC to abuse{at}pro-spero[dot]ru)
Takedown time:2 months, 17 days, 20 hours, 32 minutes Bad (down since 2025-03-04 07:51:56 UTC)
Tags:exe LummaStealer Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-03n/aexe b80b32ff1d730cfc947db68a4fc546576195bf302d1a05eee31b988fd53ea132Virustotal results 54.17% LummaStealer
2025-02-17n/aexe 12b096048be2cca3f61e8fe031efa942faf8f4c31cbafe76953b744537275aceVirustotal results 54.17% LummaStealer
2025-02-03n/aexe 8bc4c1e92cfffe6d52dd7f5c65263e24dbc7bc470dbf631e782afd5e90ef5ee3Virustotal results 33.80% LummaStealer
2025-01-29n/aexe d4fb0e3c1d8a97e3b3baedabd704ef849e7fc96ac1c1b08801585ba4ee11fd29n/a LummaStealer
2025-01-29n/aexe 05d19250d7f78428660571d9f14755b27c1c94b68a7da1916a0909a9ca6c3been/a 
2025-01-19n/aexe 7902e87ab677a55e32d8d354a1b225c67c89c871cdd711771dc5399f57fd6aefVirustotal results 29.17%LummaStealer
2025-01-04n/aexe 9c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92Virustotal results 25.00%LummaStealer
2024-12-30n/aexe 72a37e2a65b502af4a3fabf99f069bdb51a50cebb764fb6eb4a1920320dd849cVirustotal results 25.00%Vidar
2024-12-22n/aexe f2c2df5d625c6983881695ab53416c52aa574821e01074f607b6039e5d79e76fVirustotal results 66.20% Vidar
2024-12-16n/aexe 5746d38d3f64fd37ad4aa158d119eec1378e6298bd105323d5ffc791b9f5e88aVirustotal results 65.28%Vidar