URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as PureRAT.

Database Entry

Payload

The table below shows all payloads that have been identified as PureRAT.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-08-02 13:22:11	21ab822206407d6bc66d1a2a0f81262e20274368d4eaea3f60ccc2753aaedd88	exe	423'936	n/a
2026-07-21 05:12:17	9ceeacd7f64359972fc44c73798a4e215effeff4bda4f6e309bedc67bc0c8d38	exe	1'550'195	n/a
2026-07-06 07:37:12	df012b61ba220a13b7da5616a48f5ad422800c7bf6ac5b098343cb04e9c67fff	exe	821'248	n/a

Number of entries displayed: 3 (max: 1'000)