URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as PhantomStealer.

Database Entry


Signature:PhantomStealer
Firstseen:2025-04-02 07:51:04 UTC
Lastseen:2026-03-14 21:23:25 UTC
Unique Payloads:64
URLs:61

Payload


The table below shows all payloads that have been identified as PhantomStealer.

Firstseen (UTC)SHA256File TypeFile sizeVT
2026-03-14 21:23:25eab4400f224ae1b53ace5aaa660600cec7344d7573b16c6f31566846a065676a3'480'324n/a
2026-02-27 16:15:10f0210da3603f43d66ac5fd9ce665c9bd544cdb66ec47d30b03b8191a6c1c09dcExecutable exe1'640'960n/a
2026-02-25 13:45:085f7f0c5c9aef6352a28e58882f571f249dfb451daf00a0261d7a7bbb9e551d74Executable exe1'597'440n/a
2026-02-23 12:02:06cea61b4a9b33918afab25a788717902248193ede839dc572428d7a6dcbc4e069Executable exe750'592n/a
2026-02-19 14:11:3155a9d922e96e48f6dafe5d3a8026268cc10ae3958b61b9121f0e4c93edca3b29Executable exe1'764'352n/a
2026-02-18 17:53:45455a9909fc582c3ae4208542b242c6b7adb1b54b900f22992ed0a5b140784aa13'513'095n/a
2026-02-18 07:53:08882f1511c67b8ebdd00fa5a836f2821e40ccbd52a2fcb74dde7ddbc8fde9aebe3'554'709n/a
2026-02-18 07:53:07849a780985cdee9040d70b8be27b8b1fdca72c974a17dd169ac2a989b1930aa13'656'073n/a
2026-02-18 07:52:089ea92320907fb4ec21c444f263b340e4e2db1cb0887593dc20be5c52abb217d63'554'709n/a
2026-02-17 15:44:092e1a98aaf301eab8703fed1a5a21b77587e843b6b8fd52fbcc89a27072cbd5173'496'313n/a
2026-02-17 15:38:0966f9f54a8f0ec28288f1ecf388b8b692f0a4aa427c9a664832e91adaf5b0690a3'521'069n/a
2026-02-17 12:54:50cb26297f974f33bff2a5fb526f501b167046f3219aa11d8bb5e926f89163106cExecutable exe1'814'016n/a
2026-02-17 07:48:092e48fc774348843a524f817bb62a80726ed05181193428c41c8063f3e8ee118e3'496'313n/a
2026-02-17 07:03:57196784d5fbf0639fed3c9dc108a283b01fe486e212b4fbba204e3f734f8a8a853'513'689n/a
2026-02-16 12:40:11258c1f9ced10998c67b8c2ef3e879364f247b56cf586dacd2e733173cc9056193'661'413n/a
2026-02-12 00:23:49f34e81d573034fef98a4a952b348a581d5d3ad1d95aeeea8131804378df437ebExecutable exe1'860'096n/a
2026-02-09 12:32:5925ee1cc5539a946692ebbb60c4427dfabc73bbcc660aa49cf3e08b64d9e1330aExecutable exe1'786'368n/a
2026-02-06 11:07:0885998b012fd8c20899b3f9c264a1e7c594ddcff8eb4ebf4e34c56efb1ba740103'594'289n/a
2026-02-06 00:56:00965c36375e059921fb79fae235962d6f239bf66ef8921fd5203c4a8773a0dc893'593'329n/a
2026-02-05 09:04:13a08cde6bab4b2f683198287e9419f0e48918989c6000afb19f70ba0a0fab743b3'725'869n/a
2026-02-05 09:04:124b250434bed12ef47cdaea60072ffb83c48e94d873dcbfae378620499d2ec13b3'725'989n/a
2026-02-05 09:04:1001afd8f97cb7e6f12bd97f06b862c27398ab81f7387c13b705fdf23050ffa0cf3'725'905n/a
2026-02-05 09:04:09195bcb3c7d1c263ae05679c48fcca088d8fea34d263a8b52a6aa8e225bc1b0503'726'809n/a
2026-02-05 09:04:0918351edbd499d635aa72c66aa31134fe3525b89e279aa83a768a7be073a0ff763'727'769n/a
2026-02-05 08:49:351977061e6372841cdb5762fb9f177efe2e9bbbb4603fc1fc66b2880f9c4ae5a23'590'481n/a
2026-02-05 06:15:176a2ad4bf1ce6762ef84004adb6fad86c07da1e4e6142fcecff7e1ab68a6de7993'591'441n/a
2026-02-04 07:34:424a34e6614acd4a138eb1f308c21be91a8f0c53f00c307a1a5cf2a178182b62c43'730'033n/a
2026-02-03 09:21:40a53e0cef9c96e6e71bc41a119e500e1ace15d6c23cbd22a0f25bc0a9f8b7dc7fExecutable exe1'858'048n/a
2026-02-03 08:33:18c0b1fa407b6f1c7a2c0636febc35adf5494f887dd5001be9bd5fab0870ad2ecd3'730'033n/a
2026-01-31 17:59:3165ca5368c87b5c53a24995aa3bb88240abf1766e2fd013ad10756e5006be286cExecutable exe1'773'568n/a
2026-01-28 17:36:35a0a642f5131f1d82cb91f1237deb6b0002b0e6f178d208295b5b7fe39cedb1d6Executable exe1'896'960n/a
2026-01-16 16:30:09a4f76092ea71e5b746ad33d7264bc2b649780a53c7c5b593079b27e4d3e0966c3'382'111n/a
2026-01-15 08:39:07f497eef30ffec019c5c422c48a7e1fe102176def991edfbaee3843216142535c61'443n/a
2026-01-15 07:49:11bf73f538cc8750a1fa878fa39ff1040b0520b005b7e2de3bc525223bc29d7c113'379'053n/a
2025-12-25 14:57:25005465cdb44c012d9281fe213cd1622ef721d69f07009fd34ac9ca2a3c598a813'352'083n/a
2025-12-10 06:53:08d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 19 / 62 (30.65)
2025-12-10 06:52:08d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 19 / 62 (30.65)
2025-12-10 06:51:11772b10345350d23f8dd33902f88e08d47cff76ecf7093b8d4de040e125bc31c03'352'356Virustotal results 5 / 53 (9.43)
2025-12-09 15:09:1292a621a147364cc1df479a60d42a78f863a36a596e4a81543c0a3d02a0f331be3'330'043n/a
2025-12-09 15:02:09d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 18 / 62 (29.03)
2025-12-08 17:27:17d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 18 / 62 (29.03)
2025-12-08 17:26:12234863f4d5d710de61e803b48792e1f5492bf89f5ba56b22c34a3878842464823'330'043n/a
2025-12-08 17:17:1298e35825f6c01766ea302c10e53b723dc2eb862b1ebb068e151d5978b87a028b3'330'372Virustotal results 6 / 63 (9.52)
2025-11-20 08:09:09b79d958cdf29416de5a7f1bea0de9a8010a0ae3136f00cf078de06e4c301e8883'330'440n/a
2025-11-08 17:03:07d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-11-08 17:02:08d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-11-08 16:52:09d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-11-08 08:03:07d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-11-04 08:36:09d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-11-04 08:35:12d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-11-04 08:35:11d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 15 / 62 (24.19)
2025-10-29 16:09:12841af82ce668c0593a6b304a3505e7f2c33c7420c7de0a0745f9be16310696653'345'060Virustotal results 4 / 63 (6.35)
2025-10-29 16:09:09cfd8024adf35c0e3ce5fc2628b65f50213035fe77992234368e7bd0ee3f072813'345'060Virustotal results 9 / 61 (14.75)
2025-10-29 16:09:085f45e4e68f2b089b372cf1ef9b6db1a1e61f4b7889b73706bb1caa0d98ef58f737'028Virustotal results 7 / 60 (11.67)
2025-10-29 16:09:069c1d33c887c2488fab4eca5dd5c09bcb173c9d09d162442a329f09031051033f35'306Virustotal results 5 / 62 (8.06)
2025-10-29 15:58:10d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 4 / 60 (6.67)
2025-10-29 15:58:07d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424Virustotal results 4 / 60 (6.67)
2025-10-29 07:29:06a05790987759904eaacf9334088c089bc2bab90c7223d6e72d3014043a3b72bc79'326n/a
2025-10-23 08:25:09d9c88c1a21fc918ce8082e3c71e47e8b7e694b6b1fab0d94693bba1ddc13e693999'424n/a
2025-09-12 07:37:014bd04debc182c6d62ead8d7682150188f1a483a90439dde4d4b17f70b0d9a2c03'933Virustotal results 1 / 57 (1.75)
2025-08-01 06:34:07b55e5f2eea6a4424153cfb2b0c655e899e569635fcfd908f3282b658e0032b8e492'328n/a
2025-04-29 12:00:0829213c5efb63d948ad4dc9c3fed382ee9159de8721cfd98c9f67ed6563e92d37Executable exe72'704Virustotal results 24 / 72 (33.33)
2025-04-29 05:51:1112e35465ce2fdaad24558f41692cb9a81274f8ecc37cd15ad4d572ed5f1178552'271Virustotal results 23 / 63 (36.51)
2025-04-02 07:51:044e28f186f3855291ec84b24da61938ab604d90d3121e1667f50bda632a5a3dd8177'364n/a

Number of entries displayed: 64 (max: 1'000)