URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as OrcusRAT.

Database Entry

Payload

The table below shows all payloads that have been identified as OrcusRAT.

Firstseen (UTC)	SHA256	File Type	File size	VT
2025-08-26 14:00:14	621fd51b78644e9b8dfa8f419502b204a8084b59f45dc800f39df7c3fa75639f	exe	1'334'784	21 / 72 (29.17)
2025-08-26 14:00:11	a2c9a9ebdf13c0c7994382cb7e01fe0374bf43253dd58f908f60be03177753a1	exe	863'744	48 / 68 (70.59)
2025-05-02 12:00:10	0b889c59cbac2e0405f732022b21064b21f6e59d0d757cb42ce54c713bb87f92		1'280'908	6 / 61 (9.84)
2025-04-23 07:38:07	604422cea74ed47744fc2b7251826f2e82d6e1937d82297ea86256e07f74181d	exe	865'280	n/a
2025-04-23 07:37:07	4406a590a93dcea1e185aab2cf719a0bf274691c9ef49c3cb1f4d73d00a0c1d7	exe	2'759'680	63 / 72 (87.50)
2025-04-23 07:37:06	70832f2bcd6f0d0cfa74b27c91e6801e4fc627e103d302de4e6efb189e00c672	exe	866'304	55 / 71 (77.46)
2024-12-07 14:36:20	3e44b4569dbbf3b77f6bd8d232962f57269aa77d4e42e5906e460474d20bde90	exe	4'247'040	47 / 72 (65.28)
2024-12-06 01:42:37	6092579a997945b10d3f279693baa004d180417ccfec941c45eb20705a2b4706	exe	7'284'070	n/a
2024-12-05 17:13:07	3e44b4569dbbf3b77f6bd8d232962f57269aa77d4e42e5906e460474d20bde90	exe	4'247'040	n/a
2024-12-05 16:57:22	6b8848b38b3e239a0df83efc456ad22bf5e59e7145b59d1f8e154881ebb9f8e3	exe	7'203'686	40 / 71 (56.34)
2024-06-15 07:44:23	ab6a0f64098b538d3a9e3e58646291f0852c0c277e65daf17d4172a6ff6ce5db	exe	2'070'528	33 / 74 (44.59)
2024-05-16 07:16:09	2e6e4938bd45ac55dfc1b0c4a7766d1aa622e626cd4a18249600fe1392c788d6	exe	87'056	23 / 73 (31.51)
2024-05-16 07:16:09	f20585f92942d4406423ebe1257b5eae8a460721e00bea42dc70ec948bd49f2e	exe	87'056	25 / 73 (34.25)
2023-06-05 16:25:24	fc35a0e0418cefe500b02b81241fbb0338e7040db20934ed9abf3e6d55f879f4	exe	6'279'680	55 / 71 (77.46)
2023-02-26 04:48:05	29c34406bc0b9ae5c44474529917fd6e2177f66381131aa2ede5bfb6da334d96	exe	3'112'960	51 / 70 (72.86)
2023-02-22 08:22:05	9c9661cfcd755be8a7df9c1b2f3853e429206d684531d87d168d63f6817cdbe2	exe	3'098'624	55 / 70 (78.57)
2023-02-22 04:28:04	64adac3a2a868273d39e80b52ea6fa6f41368db1028ee6ac5de11290e3ab45e2	exe	11'776	39 / 71 (54.93)
2023-02-19 23:27:05	c7a92905d66ebecd0d8853b4947e6c1256b471af7cad1c84ef22765d1b5a5a67	exe	3'112'960	53 / 71 (74.65)
2023-02-16 17:33:08	4b632ccdd041def4ecbaf20f41033ebcd8317ad696ccc66de1544868f1d7fb61	exe	3'156'992	54 / 71 (76.06)
2022-10-19 05:59:06	1780430ff5ad71b8c89b9c59d2924b16cb7fd07da479b8b394846c792f7523cb	exe	938'496	60 / 72 (83.33)
2022-08-09 16:38:31	d7d9cd6cc6d2becd8e0d2526b9cf22a82582c0e06970788fe5d9a0f44297e520	exe	3'074'560	49 / 70 (70.00)
2022-08-09 16:38:28	5fce0b76926506b141340f13b488ac9a463240f35382b8ce9b108dfb92aee07f	exe	924'672	54 / 71 (76.06)
2022-08-09 16:38:27	5fce0b76926506b141340f13b488ac9a463240f35382b8ce9b108dfb92aee07f	exe	924'672	54 / 71 (76.06)
2022-08-05 17:49:09	7f1b4c00cf72ed281aa727e7855e45342cfcfc2e8464b95a9480d9961acfcc65	exe	925'184	59 / 71 (83.10)
2022-02-21 17:52:05	e2e3187e91bcce330f9699b7d90e97b9ddd8ff92d1a9b5742ba15d8ea675e666	exe	930'816	48 / 70 (68.57)
2022-01-08 03:50:43	030de3a6ac5f11501e8a9492846e393fc8be584f4dd68355bc54a70bb35ac4a7	exe	92'880	n/a
2022-01-08 03:01:57	e21d43df96e42ae29354ecf4b21e803c0c3bfd9a706f5f7ee334b1893ae92c6a	exe	91'344	14 / 67 (20.90)
2022-01-07 18:14:07	3573aef05e6255e2579fc47d55765871702a351b9d7362a9d855ee92ed28aadb	exe	81'104	15 / 68 (22.06)
2021-07-09 11:06:07	a9fe52010982ccd3628a5a882c019556b361c3fa7c29cb8052ff66f02bd28490	exe	3'292'800	n/a
2021-05-02 10:41:04	3e4ef7b0224b4601e28838ec6319634315025d824c1404a2a9e114139dbdbe21	exe	925'184	48 / 68 (70.59)
2021-05-02 10:39:58	3e4ef7b0224b4601e28838ec6319634315025d824c1404a2a9e114139dbdbe21	exe	925'184	48 / 68 (70.59)
2020-12-22 12:05:05	eaa563c1c751fb2c18a25b5b2cd91f88cf8dfdb67059ae3ebaab763a6831d050	exe	32'232	46 / 70 (65.71)
2020-12-14 08:12:09	b9657cd9005b01b162ce90306ba1b7c7c3df3551fba5f008efd780086f461e72	exe	1'081'856	51 / 69 (73.91)
2020-12-14 08:12:09	d92ee183633151e24c7ab0e670f8cd15f41defcf9b927780176d9b7bbe3c97f1	exe	1'025'536	55 / 70 (78.57)
2020-12-14 08:12:09	e199b52c6e53f641ac035a22bc75963d32bfb70dfb8a64a2cbf7d3efc9c1358a	exe	1'048'576	47 / 71 (66.20)
2020-12-14 08:12:08	2060ac076d0fc563f875a2256d6fc88d0b5609df077e8313388b12f6221a3a75	exe	925'184	56 / 69 (81.16)
2020-12-14 08:12:08	f7e7dfe0a2e59a746679694100b4549408a7e5513d3b1cf4bee0ba981f5e1703	exe	948'224	54 / 69 (78.26)
2020-03-28 03:05:20	fd19ea1f1a732ad23c4020ac775bf30041cae72642b9bc8269a89b3c54a72054	exe	927'232	52 / 70 (74.29)
2020-03-27 11:00:52	f80523895dc610c65287d5192356fab7108a0a8bf78a33728289d0caac02975f	exe	931'840	51 / 73 (69.86)
2020-03-27 11:00:51	f80523895dc610c65287d5192356fab7108a0a8bf78a33728289d0caac02975f	exe	931'840	51 / 73 (69.86)
2020-03-27 07:33:15	7ffa8a4939cf92caf8983afa85749d4fcb5eaa78769fe4f5dc7794a263ee5ed3	exe	931'840	52 / 73 (71.23)
2020-03-27 07:33:12	7ffa8a4939cf92caf8983afa85749d4fcb5eaa78769fe4f5dc7794a263ee5ed3	exe	931'840	52 / 73 (71.23)
2020-03-27 07:33:10	7ffa8a4939cf92caf8983afa85749d4fcb5eaa78769fe4f5dc7794a263ee5ed3	exe	931'840	52 / 73 (71.23)
2020-03-27 07:33:07	7ffa8a4939cf92caf8983afa85749d4fcb5eaa78769fe4f5dc7794a263ee5ed3	exe	931'840	52 / 73 (71.23)
2020-03-27 07:33:04	7ffa8a4939cf92caf8983afa85749d4fcb5eaa78769fe4f5dc7794a263ee5ed3	exe	931'840	52 / 73 (71.23)
2019-11-21 11:56:28	d9cb440d375adaf9ce1aa57a860ec80d0ce79149a2f691e666743f70c8d12720	exe	2'283'520	n/a
2019-11-21 08:36:07	24bb8356caafe9cc41471938ef5ec3f45ff9f93afd68d596a7163de9646b7931	exe	2'283'520	n/a
2019-11-16 07:30:05	364e724220241d26ecba8d715464c7a911adac345442a0ea770f72408e2b6536	exe	932'352	n/a
2019-09-09 05:30:05	73897c927299bc636a10eff49bb25e89fe0753ba22a69c3c4cf73ac4d5be88d2	exe	2'407'480	16 / 69 (23.19)
2019-07-18 10:05:33	8af4deb325ddbfda524beca9bdab960fd667425a58767b07ef2a07a522cc43a3	exe	73'802	n/a
2019-07-18 03:59:27	a470a9bf3c3cd5523319e0c82091bf714a691e124bd250d458ad769495cc8552	exe	73'802	n/a
2019-07-17 10:57:58	3d51a9e6334f5dbed437fa26eb2564720482fc6a6b259c467731471d91e009ed	exe	927'744	n/a
2019-07-14 19:45:14	8ace09eb3008fc642ea8e4da5b7658510f628ccb4b5dd37bec0fa03f9a6f4d44	exe	7'168	n/a
2019-07-14 07:39:41	8aa7bf678ebfcb52ec2ee3c420a5ac11b4bd76077f97d942032fc71b634994b2	exe	7'168	n/a
2019-07-14 06:07:38	00e97571ce6aa957756506df8ddcec9b9666c71e68a2cbc9e66b86199a81b2f1	exe	73'802	n/a
2019-07-14 03:25:18	2925ee42d67d0376280650536b4ea72f574c1084d947dd0cd9518566b46c66f0	exe	73'802	n/a
2019-07-14 03:25:16	fb4245f27c8b551d98831b939648bd5e40585eb47024faba9878714aa4d9c62a	exe	7'168	n/a
2019-07-13 06:44:15	ec65db4ecdc812e2035450c65c297b16944838f31ca69b7ea6ad742906617bcc	exe	7'168	n/a
2019-07-13 00:42:28	ef7d88a254dc3c6f8448fb52a8b7e24aae1094f0f0d13f1ddb842ba3c2137f27	exe	7'168	n/a
2019-07-12 18:46:20	44c8e95eff758f35b9d9737588a79d38d2997ab7052531b9aa7d1f09900a6b06	exe	73'802	n/a
2019-07-12 13:37:43	44f54d6dc70e7871c929c4aae42c48fea098721b8fd533cf4f550b8e96dc7d7c	exe	806'912	n/a
2019-07-12 07:02:30	59a3ccdef41dc2b6e3e7f35f68b37b62dd7dc296f3bbce1fc3187a0f51ec7186	exe	12'800	21 / 70 (30.00)
2019-07-12 07:02:17	454f6d2e0cac9c94e26c64609e21818cad49f2dc1e5e2640cb435269d0eec099	exe	7'168	n/a
2019-07-11 13:06:53	37e30d8dc8aa587bfb1d758efc4778453e6fed14f5f8647b90f1b9dcc7b5344d	exe	1'352'192	n/a
2019-07-10 01:06:27	bfc128f240737cb967fac282d7b8421faa9f54594d5c872dfde6f9dd463abadd	exe	7'168	n/a
2019-07-09 18:48:26	5288f722e7e20d78190d54b13300a3d20edd7f5fc3910f04700913f4b2c6b48d	exe	73'802	n/a
2019-07-08 18:39:24	7b7c153b334c99028aa8ccd0de45e69f52a544b6ffeaf98f33107abd343e9920	exe	7'168	n/a
2019-07-07 12:31:25	f354764dbae4829a59182bfc260bb439486e6a959be40ddfaadc2d27dbd9db4b	exe	7'168	n/a
2019-07-05 11:43:26	4b04627008335246d70b709cdb27f8c7a21b522f0d596b7bce6aea0eb17594ed	exe	940'032	49 / 72 (68.06)
2019-07-05 07:15:18	f87f7612826f9da221ebbcaf14174047c0230eea1952c96f9728a9c5b5d343d2	exe	73'802	n/a
2019-06-12 14:52:43	b8712ac2d4fff6ed84d0cddfcf3759fba21db4e1c8f1929d758ff3e19b7e02e4	exe	1'264'128	17 / 72 (23.61)
2019-02-26 09:38:52	6945b591ba5d8dc808fdc022ae2479c5b06a4c939927adf00e4c234b9bfcd828	exe	1'486'336	26 / 70 (37.14)
2019-02-04 21:32:28	8d0f52d20e010b268b686b385c11147b0e3ef4a5a40de7dc27394908c6ac720c	exe	929'328	n/a
2019-01-28 20:20:49	f30b953b909e3a9a7185529fa2d4e218f75e73e22908599974e8b9791cf3c5b5	exe	1'113'088	n/a
2019-01-04 17:43:02	b7a86111318490dbc068c7c9e2a6a657a0ff2e1d6e8558fd377ea098e946ff42	exe	925'184	n/a
2018-11-20 17:30:14	12b479aa48b2ee353262197143a55251d0b329927113b10bf928d3f96ff183c6	exe	1'121'792	28 / 67 (41.79)
2018-11-20 17:30:09	12b479aa48b2ee353262197143a55251d0b329927113b10bf928d3f96ff183c6	exe	1'121'792	28 / 67 (41.79)
2018-11-08 17:41:22	e2f944313e4bf9f00c8fd3c42215cd9797292b4aea696d7bcc0a8387e8cfb026	exe	925'184	44 / 65 (67.69)
2018-10-29 19:01:03	dda1fc31d4d4d37d544a3ff537863a909706b861dcaebb33c084d29f4ead488e	exe	1'236'680	12 / 68 (17.65)
2018-10-29 17:16:05	dda1fc31d4d4d37d544a3ff537863a909706b861dcaebb33c084d29f4ead488e	exe	1'236'680	n/a
2018-10-29 17:15:53	dda1fc31d4d4d37d544a3ff537863a909706b861dcaebb33c084d29f4ead488e	exe	1'236'680	n/a
2018-10-29 17:13:36	dda1fc31d4d4d37d544a3ff537863a909706b861dcaebb33c084d29f4ead488e	exe	1'236'680	n/a
2018-10-29 17:12:01	dda1fc31d4d4d37d544a3ff537863a909706b861dcaebb33c084d29f4ead488e	exe	1'236'680	n/a
2018-10-03 22:15:15	513771c6eb128449538f3dd3ddb4e61dc5af324823fa393e4538b5f3c9c2c058	exe	1'258'496	n/a
2018-10-03 22:14:03	513771c6eb128449538f3dd3ddb4e61dc5af324823fa393e4538b5f3c9c2c058	exe	1'258'496	n/a
2018-09-30 18:10:53	9c492ee194b39574d95911001db02618cfa34196cb46694a51d6914e9884af59	exe	1'190'912	n/a
2018-09-30 17:07:23	9c492ee194b39574d95911001db02618cfa34196cb46694a51d6914e9884af59	exe	1'190'912	n/a
2018-09-22 08:46:39	548a4a82a2483fc8b6afff1d819bb26ed1b6e5579f4cb012eee8eb7d53747a65	exe	1'390'080	n/a
2018-05-18 12:28:54	6eb9f57fc91984747c6ac963270e3b676db284c33b7574bada5c701f31de63c0	exe	1'414'144	51 / 67 (76.12)
2018-05-18 12:27:00	52da9af59f13e9ee18ff673208d7125de834f048dd2d9cc39036321b5425ca1d	exe	1'416'704	46 / 67 (68.66)
2018-05-06 13:50:41	6eb9f57fc91984747c6ac963270e3b676db284c33b7574bada5c701f31de63c0	exe	1'414'144	49 / 67 (73.13)
2018-05-06 10:41:03	52da9af59f13e9ee18ff673208d7125de834f048dd2d9cc39036321b5425ca1d	exe	1'416'704	47 / 66 (71.21)
2018-04-24 17:23:41	dd65ca16d3c84bde6ed04c78c35aea4ad8d145fcd617eec596d51a73bc68bd5e	exe	859'648	56 / 67 (83.58)
2018-04-17 14:29:17	dd65ca16d3c84bde6ed04c78c35aea4ad8d145fcd617eec596d51a73bc68bd5e	exe	859'648	55 / 67 (82.09)
2018-04-16 17:18:50	dd65ca16d3c84bde6ed04c78c35aea4ad8d145fcd617eec596d51a73bc68bd5e	exe	859'648	54 / 65 (83.08)
2018-04-16 08:25:29	dd65ca16d3c84bde6ed04c78c35aea4ad8d145fcd617eec596d51a73bc68bd5e	exe	859'648	55 / 67 (82.09)
2018-04-16 08:11:23	6c874ec93542ea8d9952de2e6d2cc068976f2912173c3186f8a277f855dab28e	exe	869'376	45 / 68 (66.18)

Number of entries displayed: 97 (max: 1'000)