URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as Ransomware.KnightCrypt.

Database Entry

Payload

The table below shows all payloads that have been identified as Ransomware.KnightCrypt.

Firstseen (UTC)	SHA256	File Type	File size	VT
2023-09-18 22:08:21	db72b1c64043decbdbb082e4ada7630ee51d57d08ed2c01127a2d915a8884194	exe	1'163'288	n/a
2023-08-30 08:39:02	08d8bd49d5248a1ceca14cd69f327f6685dbc44887aab5a14eb79c71baa123c1	exe	1'392'760	n/a
2023-08-30 08:36:32	3fbedfb9ae1e9bcef7983491124e3a50937f9c5209b7cfc2614197a2e8045cfb	exe	1'392'760	n/a
2023-08-30 08:35:40	a2c654357d790d7c4cec619de951649db31ecdb63935f38b11bb37f983ff58de	exe	1'863'880	n/a
2023-08-29 13:55:08	6ae637c07dea5f9186ac3e6090664fdbcf8523fe82a8a94d70ca2cf69db630e1	exe	1'392'760	n/a
2023-08-29 13:53:09	0701df6ec96aaea2af21707445fdfd8812dd8b7c7e695b920eedca205518826c	exe	1'392'760	n/a
2023-08-29 13:53:09	e62d6e57a7ab153771d9c550062cc67f6d5befcc52286bd6f1543201f7088acd	exe	1'392'760	n/a
2023-08-29 13:52:06	7aa4903001e55982d11c76c178d9006aaaf137c5a941067cc6bf1b91edde62a1	exe	1'392'760	n/a
2023-08-29 13:49:05	66871cebfa92f04476679fb3b00a125f7eb43ea35cfb8b187b4aa2bbd0230c10	exe	1'392'760	n/a
2023-08-29 13:47:08	eedda61d02d8bd0e145a07e6048621fc84f420376e6cda2616c2d77d4fd4fe18	exe	1'863'880	4 / 66 (6.06)
2023-08-29 13:31:12	3bd52cefc9d88c5292275729ca096c131a5db8c77ec142493a066623270cb782	exe	1'863'880	9 / 71 (12.68)
2023-08-29 13:31:12	5c0f3de1254bcad7f457ad1898df2fdbe44dc964b5e92fba125c19888481da75	exe	1'863'880	4 / 66 (6.06)
2023-08-29 13:31:11	f2571431c9d8e87081816d46cda9bde8d98b081056fdc2114e88cbad2d544cec	exe	1'863'880	4 / 70 (5.71)
2023-08-29 13:31:11	1341bd6193ea223c05566aaca13fc1152732b67af8344519d6efaaf9ab6ed5f4	exe	1'863'880	4 / 70 (5.71)

Number of entries displayed: 14 (max: 1'000)