URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as LemonStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as LemonStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-03-28 06:46:18	fb3e6d6bb2781c8a737c38f4d31beed93a89cc2ff9b8c00e7682f04c72fd9a60	exe	77'470'025	n/a

Number of entries displayed: 1 (max: 1'000)