URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as SantaStealer.

Database Entry


Signature:SantaStealer
Firstseen:2025-11-07 10:26:15 UTC
Lastseen:2026-01-21 13:13:11 UTC
Unique Payloads:12
URLs:12

Payload


The table below shows all payloads that have been identified as SantaStealer.

Firstseen (UTC)SHA256File TypeFile sizeVT
2026-01-21 13:13:113f25afe7c666cd7b51c2343a58b93ee844da891df2372e66b75238fca8caf397Executable exe7'204'864n/a
2026-01-20 12:19:09e0d7a5a64ee098909899d36e8a0af044db1f3adacb6a152531f4ad85f119161bExecutable exe7'062'016n/a
2026-01-20 00:14:0705eb2a676019d8eb3d666d72baaaa64460ab960aeec60268df9c96702192d856Executable exe7'108'608n/a
2026-01-19 20:39:10ebb1fa384557346efa295fdead88df766e64a06a212092ccba13d912449760b9Executable exe7'117'312n/a
2026-01-19 16:31:06ed63360561b6f16cc4b6a62ce670a5356ebd1f01acd4e576bd947b72a8b7851dExecutable exe6'816'256n/a
2026-01-19 15:48:0942029c1ca17fc088edff1faaa65cd6ea3faf3c0fa7fd3d0ddeb9b1c6106c66ffExecutable exe7'120'384n/a
2026-01-18 11:45:08a71ede07b162287ea9945348f670e1ede7a972858ee66b924328494c42f9fcc6Executable exe6'957'568n/a
2025-12-19 07:22:09689d443df31b392d284f6ea706caf52335d72d02480aa63bda02e3850e16af30Executable exe6'214'144n/a
2025-12-18 05:09:0962997f61fca883fa2cfde6dad151414f4d88b9a0b873f89530130a408432907bExecutable exe5'551'104n/a
2025-11-30 06:14:0905167a0b2c9f8ff23fc5aa0c9a9a71a6a81c89fa8fb23e8b98627380d43beaacExecutable exe5'050'880Virustotal results 18 / 72 (25.00)
2025-11-30 01:32:098cf9bd9dd07635e07a8e534b38355effa6d5c9f96d9983830b9b840aa1138f78Executable exe5'020'672n/a
2025-11-07 10:26:1526c3abc8bf32ff0f548adfa3c5fdf430c9bf061865512b83c4559553e668766cExecutable exe6'228'992n/a

Number of entries displayed: 12 (max: 1'000)