URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as VShell.

Database Entry

Payload

The table below shows all payloads that have been identified as VShell.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-09-14 14:16:12	52a0d6ec69d8f3b98c240157e5679df2bfbf9123cf2a9abb078567a6e369bfec	exe	4'608	n/a
2026-09-14 14:15:20	4003a1960678bb8c4df8164e55dc6ab13aafcd0bab755d3720b9bb2a45a05a2e	exe	4'608	n/a
2026-09-14 14:15:18	4eff95566912a2032bc6aff7f0a830ca29f18d815068cfe4bd6240d0fb7b117e	exe	3'584	n/a
2026-09-14 14:15:18	3e7d4140d6032515c6d19b25ee836c522519935db8b54d350020f94f744c5281	exe	4'608	n/a
2026-08-04 02:36:07	4945914236b4a5d627aab874227938f10547f42d1db9f9f319a0bd36b89a9f38		197	n/a
2026-08-04 02:36:07	5ce81ed3419f9057c86686b522d2474913a5a70a0401f5795b460b6feed2c198	exe	3'584	n/a
2026-02-04 06:51:10	2d292610e8849abf770da00fb14a65279072097d3c05aad40ce6d126aaa9c345		8'666	n/a
2026-01-23 15:07:14	f0857c324df14c87841c4b03107858fbd48e92aa0f485ec80f75cca4b74ecd85		2'562'844	n/a
2026-01-15 18:04:15	65146c7cb01492b8c4437711bde00cb9de7229e4e589aecb3c8c36037aff117a		6'968	n/a
2026-01-15 18:03:06	1d971ecb535f66b367264556aa031706ec71504e60258d4d35640ade33bcf170		9'800	n/a
2026-01-15 18:03:06	1d971ecb535f66b367264556aa031706ec71504e60258d4d35640ade33bcf170		9'800	n/a
2026-01-11 06:35:44	bb8c16cac86cb2d8841aedd1090dc1217ad643dd167f3ffcd7f5faf1b1028398		2'607'204	n/a
2026-01-09 11:04:11	d410a87be189a723508cde747f43e40d35017b3886ca86fec8ca6ca4630118af		7'428	n/a
2025-11-06 13:50:14	8ad5ab76715dc232abb93983a295713872af9488037383c73a2f96f9fe6b63b2		9'800	22 / 65 (33.85)
2025-11-06 13:50:14	344c391cfd4fd30407bf55872d05d44b679a117e407114c0e113b3c6c4cbbb29		9'800	22 / 65 (33.85)

Number of entries displayed: 15 (max: 1'000)