URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as CrimsonRAT.

Database Entry

Payload

The table below shows all payloads that have been identified as CrimsonRAT.

Firstseen (UTC)	SHA256	File Type	File size	VT
2020-08-24 11:49:50	a8f02b8afe1ae18247c52d2e7272de680c81e7f215c5302d9c0961ff3ad52cb9	exe	1'308'672	43 / 70 (61.43)
2020-08-18 15:16:19	a8f02b8afe1ae18247c52d2e7272de680c81e7f215c5302d9c0961ff3ad52cb9	exe	1'308'672	n/a
2020-05-26 09:28:32	72146e890efa1de6ee90e445ceb11ad9dc3b053fa5e82757756a393ee4617a77	exe	254'976	10 / 68 (14.71)
2020-05-20 12:06:05	8ad2241815c24934b523082e603316065818decfe0d4897d4a6dee84626c5dfa	exe	1'430'528	16 / 73 (21.92)

Number of entries displayed: 4 (max: 1'000)