URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as CelestialRAT.

Database Entry

Payload

The table below shows all payloads that have been identified as CelestialRAT.

Firstseen (UTC)	SHA256	File Type	File size	VT
2025-05-26 03:04:06	a79dd8a9305570a1032c7d16ff2f1b2b0c6a44a857f977676181e5c9dc7f148d	exe	1'236'480	n/a
2025-05-25 23:52:07	4d3c3ffd581a9f1e9e6e7b67e18da73ea2c042455466a7e80e9457a431ec25ac	exe	1'234'944	n/a

Number of entries displayed: 2 (max: 1'000)