🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as VShell.

Database Entry


Signature:VShell
Firstseen:2025-06-16 19:13:11 UTC
Lastseen:2026-11-04 15:06:07 UTC
Unique Payloads:29
URLs:28

Payload


The table below shows all payloads that have been identified as VShell.

Firstseen (UTC)SHA256File TypeFile size
2026-11-04 15:06:077a7b1c234c94c4a20540c2be5b94cb193dc16bdb263b6bb11762f25db27bdc30Executable exe16'896
2026-11-04 04:13:081859bee638ea6cc1081be27301058313e2d1213b517db791d7f89fb012c79c65Executable exe4'134'912
2026-11-04 04:13:062b0097062884dde6c69c1886decd489bf57ab5ddc27c3f8560b2800f7419b5ecExecutable exe3'584
2026-10-30 10:08:3217485b175a4ca46adbce11efa571f875fb530922b9cc7d5ad60078846ce0f6037'864'320
2026-10-30 10:08:24059715e07ff1817a54fc356794b0ed6b04fa87212cc1ae5a3039d36af31a82881'333
2026-09-23 14:30:189eb1168bb62e3e8868e17399370f6df24337e8d1718f4df02fa74f2d6107c98d2'877'364
2026-09-23 09:28:1882c367a5a25b3a4068a681a81497d02b62e091dc5c8cc3ddf4b8bffe9abb838c7'864'320
2026-09-14 14:16:1252a0d6ec69d8f3b98c240157e5679df2bfbf9123cf2a9abb078567a6e369bfecExecutable exe4'608
2026-09-14 14:15:204003a1960678bb8c4df8164e55dc6ab13aafcd0bab755d3720b9bb2a45a05a2eExecutable exe4'608
2026-09-14 14:15:183e7d4140d6032515c6d19b25ee836c522519935db8b54d350020f94f744c5281Executable exe4'608
2026-09-14 14:15:184eff95566912a2032bc6aff7f0a830ca29f18d815068cfe4bd6240d0fb7b117eExecutable exe3'584
2026-08-04 02:36:075ce81ed3419f9057c86686b522d2474913a5a70a0401f5795b460b6feed2c198Executable exe3'584
2026-08-04 02:36:074945914236b4a5d627aab874227938f10547f42d1db9f9f319a0bd36b89a9f38197
2026-06-08 06:37:0639319f0fc09e6f038864a5e35603f1f5a9f23b2a5744b991efc5f4c368891943Executable exe3'584
2026-02-04 06:51:102d292610e8849abf770da00fb14a65279072097d3c05aad40ce6d126aaa9c3458'666
2026-01-23 15:07:14f0857c324df14c87841c4b03107858fbd48e92aa0f485ec80f75cca4b74ecd852'562'844
2026-01-15 18:04:1565146c7cb01492b8c4437711bde00cb9de7229e4e589aecb3c8c36037aff117a6'968
2026-01-15 18:03:061d971ecb535f66b367264556aa031706ec71504e60258d4d35640ade33bcf1709'800
2026-01-15 18:03:061d971ecb535f66b367264556aa031706ec71504e60258d4d35640ade33bcf1709'800
2026-01-11 06:35:44bb8c16cac86cb2d8841aedd1090dc1217ad643dd167f3ffcd7f5faf1b10283982'607'204
2026-01-09 11:04:11d410a87be189a723508cde747f43e40d35017b3886ca86fec8ca6ca4630118af7'428
2025-11-13 17:28:07f5a7815e1440840b271e615ab4e49b0cde14fdd357daf48de9e697f257d5a56dExecutable exe3'584
2025-11-06 13:50:14344c391cfd4fd30407bf55872d05d44b679a117e407114c0e113b3c6c4cbbb299'800
2025-11-06 13:50:148ad5ab76715dc232abb93983a295713872af9488037383c73a2f96f9fe6b63b29'800
2025-11-06 08:18:12fe5a8a562abfa94f72d6ad19436bb2503b9755ab6c7e5787f4722513779a00bdExecutable exe3'584
2025-10-21 18:40:07ab500ad2b80fa0994cc521dbdf2619f4910498cef685aed0b58bd23a4e16988eExecutable exe3'584
2025-08-22 13:25:12f6f01d62ca3f570f1eefb21517050dfdf940ec8c7aa419f345a15d7e773a8c1eExecutable exe3'584
2025-06-16 19:13:1227c04c7d2d6dbbb80247adae62e76dfa43c39c447f51205e276b064555a6eb84Executable exe78'386
2025-06-16 19:13:1127c04c7d2d6dbbb80247adae62e76dfa43c39c447f51205e276b064555a6eb84Executable exe78'386

Number of entries displayed: 29 (max: 1'000)