URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as KrustyLoader.

Database Entry


Signature:KrustyLoader
Firstseen:2025-07-08 17:13:30 UTC
Lastseen:2025-11-08 11:50:27 UTC
Unique Payloads:5
URLs:5

Payload


The table below shows all payloads that have been identified as KrustyLoader.

Firstseen (UTC)SHA256File TypeFile sizeVT
2025-11-08 11:50:2799b3b1c7f44527206eb7f0fc7d5d928a2770be503ead28b31ce153107fa7cb4c8'308'096Virustotal results 30 / 65 (46.15)
2025-07-30 22:39:3799b3b1c7f44527206eb7f0fc7d5d928a2770be503ead28b31ce153107fa7cb4c8'308'096Virustotal results 30 / 65 (46.15)
2025-07-24 21:41:3699b3b1c7f44527206eb7f0fc7d5d928a2770be503ead28b31ce153107fa7cb4c8'308'096Virustotal results 30 / 65 (46.15)
2025-07-12 05:09:3999b3b1c7f44527206eb7f0fc7d5d928a2770be503ead28b31ce153107fa7cb4c8'308'096Virustotal results 29 / 65 (44.62)
2025-07-08 17:13:3099b3b1c7f44527206eb7f0fc7d5d928a2770be503ead28b31ce153107fa7cb4c8'308'096Virustotal results 25 / 64 (39.06)

Number of entries displayed: 5 (max: 1'000)