URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as ScarfaceStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as ScarfaceStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-03-01 14:28:34	6c42035513f1246eb3089804910dc9ff8cca1725e6f25c12eff17cb284ac35ae	exe	71'367'680	n/a
2026-02-28 23:28:15	e46f9f123d9dbecd82ac310d818fccdb0318e24810e9c76b4b4de8339880e0e3		71'422'091	n/a
2026-02-27 16:23:44	c44660ea89c20d69e7751d5a19bce83ea0686d02979c2a436d1d3799f36571c9	exe	71'415'296	n/a
2026-02-16 19:42:00	c52b443fe963af22c0129457a005f6246c454d637170b4f6e496ddfe5a27688c	exe	12'652'032	n/a
2026-02-15 16:37:29	04c6ab57035d2f19ba8a00dfec1836e88d03bf8bf153819d751260e13fa269f3	exe	90'429'440	n/a
2026-02-15 08:51:30	04c6ab57035d2f19ba8a00dfec1836e88d03bf8bf153819d751260e13fa269f3	exe	90'429'440	n/a
2026-02-08 09:36:46	bca70f1cf0487beef8eb88bf29d7ee39e732092e80f2fe61f891ae09eb408b54	exe	13'072'896	n/a
2026-02-07 07:25:43	25c08817256845bbafed63ab1a5a579ac75d6052d679549e2ab7039bcf161a63	exe	13'040'640	n/a
2026-02-07 00:08:37	fbe6d6ad999f6d7e3a63ca8c38ff1130302159704dbf0ae1cab652a353ec8615	exe	13'946'880	n/a
2026-01-09 20:57:30	e05c390713980800c3a65bac1683ebe6340c1171e326e77242a8eb6d7445c6a5	exe	90'444'800	n/a
2025-12-25 13:40:47	02d851d0b9a95190f19731d52f038f2f49ca6e1f9c32b1465b0e6718654c9c77	exe	90'442'240	n/a
2025-12-25 12:28:43	4d0db806ed1ba6f9ec11872486a646c56bf3de33c8ad21581071c9d0962721f7	exe	90'425'344	n/a
2025-12-14 15:34:38	c9bf3449b730dc2bc7a988a00deb143f58bfa89ac1cb9eb192f4d5e0920b0815	exe	92'171'776	n/a

Number of entries displayed: 13 (max: 1'000)