URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as AmateraStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as AmateraStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2025-10-23 15:50:20	52c5927204ea1f0c16fff1272b387a52e37f4f60dec0fc694874d53e27795fa4	exe	868'352	n/a
2025-10-22 17:05:43	2a162fb04ac142cfb0dfc517959162d69f71231648be34187d308dbc270770bf	exe	820'736	n/a
2025-10-20 17:13:29	62c73935a796b3a9564077c282221079d84a6f5938ac2106e594df36e35124a9	exe	884'072	n/a
2025-10-15 17:04:11	d8e268a083b161162dd23587edcc5f11706fdc86973ce2807a4623183028a5d7	exe	869'888	n/a
2025-02-07 18:27:25	8013788d85354330064e9c2b72b07a67c85015c1e072671f19f1c39cebad64a3	exe	21'785'160	n/a

Number of entries displayed: 5 (max: 1'000)