URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as Ligolo.

Database Entry

Payload

The table below shows all payloads that have been identified as Ligolo.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-04-12 09:35:12	b601d17b3a0f8d870965dd825145a2c90d85b8f4ff6a713f2fc0ea28d093660a	exe	10'944'000	n/a
2026-03-20 10:44:07	4b41f36f82db6da8767a0a1c2997c8242d80b2d10a8f1d28c252a9306ec152b5	exe	7'302'656	n/a
2026-03-03 09:41:10	4b41f36f82db6da8767a0a1c2997c8242d80b2d10a8f1d28c252a9306ec152b5	exe	7'302'656	n/a
2026-01-01 00:46:15	0b74e5aa8e84ddefd60a6663e6305b3615eb743db543323f8a0068b58d56503f	exe	7'192'576	n/a
2026-01-01 00:46:12	f6fdfedea8efb0eb9b409267ea545ff09272c9a6ba59d9ffc9454c85c70deb18	exe	7'192'576	n/a
2025-11-29 10:30:12	48868c98dfabd703031587cffdbe5ca26ac180a15e89a52e59915710f1836f28	exe	6'694'400	45 / 72 (62.50)
2025-11-04 17:07:24	bb8d408a966628daa0d1842e3f70a3a534de7600c2b6484722d0b82956160f9e	exe	5'545'984	48 / 72 (66.67)
2025-08-18 14:31:25	561b9635f3dc9faccf203e4bae11aca8a1e1e4caacbfd7ab7e75f4cfbaabfb50		489	n/a
2025-08-18 14:21:09	9de8bbc961ff450332f40935b739d6d546f4b2abf45aec713e86b37b0799526d	exe	10'684'928	n/a
2025-08-04 11:42:25	123901fa1f91f68dacd9ec972e2137be7e1586f69e419fc12d82ab362ace0ba9	exe	10'683'392	42 / 71 (59.15)
2025-08-01 10:56:15	40d4d7b0bc47b1d30167dd7fc9bd6bd34d99b8e0ae2c4537f94716e58e7a5aeb		770	3 / 62 (4.84)
2024-12-02 20:43:47	4b46df0230d98147d6955c78e5d56143bb394040de319cf980611f8359f18a2f	exe	6'236'160	48 / 71 (67.61)
2024-12-02 20:43:18	083dbfe9fbd1a94c640aa2e80c0304ac49d337b15f6f148c2f91d2c21a23cbb6		2'654'047	43 / 69 (62.32)
2024-12-02 20:30:15	07578b1cafbcd0b82948604de2e952fc682589128a176dc91a7466f216980375		6'029'312	30 / 65 (46.15)
2024-09-28 08:58:10	4b46df0230d98147d6955c78e5d56143bb394040de319cf980611f8359f18a2f	exe	6'236'160	40 / 73 (54.79)
2024-09-28 08:32:11	083dbfe9fbd1a94c640aa2e80c0304ac49d337b15f6f148c2f91d2c21a23cbb6		2'654'047	30 / 68 (44.12)
2024-09-28 07:38:08	4b46df0230d98147d6955c78e5d56143bb394040de319cf980611f8359f18a2f	exe	6'236'160	40 / 73 (54.79)

Number of entries displayed: 17 (max: 1'000)