URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as ExelaStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as ExelaStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2025-08-23 06:07:12	803a2b39cf0bcc8e07fce4d9537e5fcad0fd6c80a7fa547a7f60d844d7f956e1	exe	11'820'772	28 / 72 (38.89)
2025-07-23 01:12:10	d4ca985b2ebe90f86ef01918939e097050613b28f2bcca3bdf680c5c812105f0		9'573	n/a
2025-07-23 01:10:19	b1e89be629798fc895026c215468abdb407b91126694fcc31ba4fca5060c0092	exe	11'885'819	31 / 72 (43.06)
2025-07-02 22:13:27	126d168549578cad4d37c87fbe0d85f5516c0449e82f19314c5c07bace902797	exe	19'040'256	56 / 72 (77.78)
2025-06-30 05:29:11	126d168549578cad4d37c87fbe0d85f5516c0449e82f19314c5c07bace902797	exe	19'040'256	n/a
2025-05-09 08:59:23	689fa6774bf7d39fc53ef0aa4e75fedd448811aa554fbceae3cb78caa013241d	exe	14'702'903	31 / 72 (43.06)
2025-05-09 08:59:20	93b842ea63d8c2ca4ea2e8a59df0f872f61dcf591691fe2a7e80cf17bfa4a46a	exe	14'730'935	15 / 72 (20.83)
2025-05-09 08:59:12	5b9dd8506f14373dc169b477fb7ee60512fdea77e7e666ba7120c39bfdfd2703	exe	14'732'687	38 / 72 (52.78)
2024-10-27 15:39:11	27450801afc63f56296f01c911375f6d216f1a100f4075c45cba369c834a413d	exe	11'408'450	29 / 73 (39.73)
2024-10-18 07:29:31	6934f671d866874a1c3490520aa0bff16cd06a74346f05d50bcbf4b958eaa422	exe	10'847'608	48 / 73 (65.75)
2024-10-15 18:40:19	54b94ac48454677fbf054ed12e93be43702df08e5376d9d547216e3cb75cb36c	exe	10'848'861	35 / 72 (48.61)
2024-10-13 14:46:01	a65131b4a2afa0bbc3d7fa3db1c4a58fd3b8498a7b289013852d2979f40818d4	exe	40'403'456	37 / 72 (51.39)

Number of entries displayed: 12 (max: 1'000)