URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as AuraStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as AuraStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2025-12-26 16:57:07	495206892aea114014cfba8c9f605ad9ab6de309a685a59b36d77565919de2e2	exe	1'635'840	n/a

Number of entries displayed: 1 (max: 1'000)