URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as PureRAT.

Database Entry

Payload

The table below shows all payloads that have been identified as PureRAT.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-08-20 05:15:35	f94db5a93b19e1800be99cb0be2fb21794d3c89ccb588b53739a62c587bc20e6	msi	11'624'448	n/a
2026-08-13 08:17:22	b2d11a55d2019bb6867e97cff51bc28b357f754f079ad8f46ace460404abe9d6	exe	212'992	n/a
2026-08-06 16:47:17	1b873c981db25d16bd539aef3952a2e869dd55c27e0937064cafc5dafb70c79a		731'153	n/a
2026-08-02 13:22:11	21ab822206407d6bc66d1a2a0f81262e20274368d4eaea3f60ccc2753aaedd88	exe	423'936	n/a
2026-07-21 14:33:58	e747deb0d49a53cda8ebc02a97c5eeb875d6b5b07e1be8dfac5545adb78760f6	exe	1'548'291	n/a
2026-07-21 05:12:17	9ceeacd7f64359972fc44c73798a4e215effeff4bda4f6e309bedc67bc0c8d38	exe	1'550'195	n/a
2026-07-06 07:37:12	df012b61ba220a13b7da5616a48f5ad422800c7bf6ac5b098343cb04e9c67fff	exe	821'248	n/a

Number of entries displayed: 7 (max: 1'000)