URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as ScarfaceStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as ScarfaceStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-02-08 09:36:46	bca70f1cf0487beef8eb88bf29d7ee39e732092e80f2fe61f891ae09eb408b54	exe	13'072'896	n/a
2026-02-07 07:25:43	25c08817256845bbafed63ab1a5a579ac75d6052d679549e2ab7039bcf161a63	exe	13'040'640	n/a
2026-02-07 00:08:37	fbe6d6ad999f6d7e3a63ca8c38ff1130302159704dbf0ae1cab652a353ec8615	exe	13'946'880	n/a

Number of entries displayed: 3 (max: 1'000)