URLhaus Database

You are currently viewing the URLhaus database entry for http://utorrent-server-api.cc/1337/TORRENTOLD-1.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3439445
URL: http://utorrent-server-api.cc/1337/TORRENTOLD-1.exe
URL Status:Offline
Host: utorrent-server-api.cc
Date added:2025-02-14 14:53:05 UTC
Last online:2025-03-13 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Riordz
Abuse complaint sent (?): Yes (2025-03-13 03:05:07 UTC to abuse{at}vpsvault[dot]host)
Takedown time:4 months, 6 days, 7 hours, 59 minutes Bad (down since 2025-06-20 22:53:17 UTC)
Tags:Lumma LummaStealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-18TORRENTOLD-1.exeexe 66b6fc4a116af7fc4749b6e135206895770cd20344f66b0e1a15a7064041bf0aVirustotal results 44.44%LummaStealer
2025-06-11TORRENTOLD-1.exeexe ff8f729eb7a69bee300d0fbf2b5e1a584b4377fe63ab8df1ee92b4b336eb5059Virustotal results 44.44% 
2025-05-18TORRENTOLD-1.exeexe 796ce3e06bc10916427b847a1b6c2f1eaa9904f95db66e35c28cebec34efc9c5n/aLummaStealer
2025-04-21TORRENTOLD-1.exeexe 6f4d7ea56afebf58bad06224c451abb940024964eda927eb1431a451051d7229n/a 
2025-04-19TORRENTOLD-1.exeexe 1ea0aee1d1d90e3f79f998774f51f6daaed9b90df878abe1fd699b61ed4d3003n/a
2025-04-12TORRENTOLD-1.exeexe 4ef46582ae95f961c0a0af8262de20681d9fc34ab18ead54a634448c077fd82dVirustotal results 47.89% LummaStealer
2025-03-23n/aexe 8c0b11ccc08ca9295f15cc23733ce76f88ccb51f06435f29c32ebd200775118bVirustotal results 38.36%LummaStealer
2025-03-03n/aexe b80b32ff1d730cfc947db68a4fc546576195bf302d1a05eee31b988fd53ea132n/a LummaStealer
2025-02-17n/aexe 12b096048be2cca3f61e8fe031efa942faf8f4c31cbafe76953b744537275aceVirustotal results 54.17% LummaStealer
2025-02-14n/aexe 8bc4c1e92cfffe6d52dd7f5c65263e24dbc7bc470dbf631e782afd5e90ef5ee3Virustotal results 77.46% LummaStealer