URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as XenoRAT.

Database Entry


Signature:XenoRAT
Firstseen:2024-02-19 10:01:11 UTC
Lastseen:2025-11-05 03:42:07 UTC
Unique Payloads:63
URLs:48

Payload


The table below shows all payloads that have been identified as XenoRAT.

Firstseen (UTC)SHA256File TypeFile sizeVT
2025-11-05 03:42:07b564ff977533173152028f7e29034fe63e39f1e7b1e210b9bdb106e6fe8eb780Executable exe46'592Virustotal results 53 / 72 (73.61)
2025-10-13 18:55:34e83f9878845ca69198c485f31a036bb9fa7ead3c885b8cba9cf8e13ce8a3a691Executable exe42'496Virustotal results 37 / 52 (71.15)
2025-08-21 15:01:183869f3a8278ff182b585dda292e07fa7485932d437fe094759056ab17056d3d6Executable exe46'592Virustotal results 58 / 72 (80.56)
2025-08-11 17:38:22da6460cef117f1451cfd5a4b896fe339ea326e8f880413da5a813cf6ce164a92Executable exe46'592Virustotal results 57 / 72 (79.17)
2025-07-18 06:09:152547c912dd1be17f45b4fcf6eea11c6773a4621d01b93b3dc861ea9f936624e7Executable exe1'317'928Virustotal results 37 / 72 (51.39)
2025-07-17 07:51:0992ab2a0d2f5066e48b06fc30ed214b74cfad472101fa2eecf504a4c535528cffExecutable exe424'960Virustotal results 34 / 72 (47.22)
2025-06-03 18:11:12fe67e626cec1bf31f177cc74846bea404f819c24a873a9c17ad4ee921d5794921'340'188n/a
2025-06-03 18:06:36c4430b3e016c2ca5fd095eadc638c27bbd1a96a1315b04a4fffad5ff900abe0f2'151'518n/a
2025-06-03 18:06:28c4430b3e016c2ca5fd095eadc638c27bbd1a96a1315b04a4fffad5ff900abe0f2'151'518n/a
2025-05-23 05:55:093655350ae1b666c1e9865bcc99b071673100058e6e02a1e49cc485de1dc99aaaExecutable exe46'592Virustotal results 54 / 72 (75.00)
2025-05-21 06:22:07cfda918a498cadebe365b390d2cbb3b8a3b85f6066947a6282f182cd74632c0fExecutable exe46'592Virustotal results 58 / 71 (81.69)
2025-05-11 17:56:079d171fb14d096f5a49f8d04bb08f0e023ac08c051532e6d5a834bb752637f567Executable exe776'523Virustotal results 50 / 72 (69.44)
2025-04-23 07:38:07eef18c81faeee1877aa9cd8d8aef18b643a434fd3da221cc724070ec863e5fcdExecutable exe46'592Virustotal results 63 / 73 (86.30)
2025-04-23 07:38:07566bf481a52653a3039d8db26ffb4de42476f7d5e6a08334cc8320818e207318Executable exe48'888n/a
2025-04-23 07:38:06eef18c81faeee1877aa9cd8d8aef18b643a434fd3da221cc724070ec863e5fcdExecutable exe46'592Virustotal results 63 / 73 (86.30)
2025-02-15 11:55:059df32d691dc6483d47b40e6154aeff36f0acdc009c07b4af48618c4fb6b21b9fExecutable exe510'976Virustotal results 23 / 72 (31.94)
2025-02-10 18:12:052ba13e0367b8aa0a92ebdc41627a711b3c785f7469a1d57fb326a159891cba9462'848n/a
2024-12-16 07:51:155ae3bc20b42773c837d313a5d1c4b46f6f4ea06ba708b73c62c28a0cb576828e62'125Virustotal results 15 / 60 (25.00)
2024-12-16 07:51:1339bbdd6c2272bd92dfb169a62201e5625f2b68b0a1fba630c4d3173536315e4162'125n/a
2024-12-13 15:20:57639135eb69333aba7ecb762072d8bef1d2db83e54edbe627dd223039142b8c91Executable exe177'664Virustotal results 54 / 72 (75.00)
2024-12-13 14:17:52639135eb69333aba7ecb762072d8bef1d2db83e54edbe627dd223039142b8c91Executable exe177'664Virustotal results 54 / 72 (75.00)
2024-12-11 08:06:54548212f42d5dc4965db354d6ce075422dcb3331a213fb0b5b662e08e59234829Word file doc196'096n/a
2024-12-11 07:49:36548212f42d5dc4965db354d6ce075422dcb3331a213fb0b5b662e08e59234829Word file doc196'096n/a
2024-12-10 14:46:270e944d5857ca770465f9b4372cf3ec39050cef2cad2c3cd63dc01157f840e164Executable exe46'592Virustotal results 53 / 72 (73.61)
2024-12-10 11:49:460e944d5857ca770465f9b4372cf3ec39050cef2cad2c3cd63dc01157f840e164Executable exe46'592n/a
2024-12-09 09:10:353106e90067456404a9f3e768ce3b60de6ae91fa2be664255ad6fe86c3f87e67dWord file doc200'192Virustotal results 24 / 60 (40.00)
2024-12-09 07:22:373106e90067456404a9f3e768ce3b60de6ae91fa2be664255ad6fe86c3f87e67dWord file doc200'192n/a
2024-12-09 06:00:10639135eb69333aba7ecb762072d8bef1d2db83e54edbe627dd223039142b8c91Executable exe177'664n/a
2024-12-08 13:07:22947bce97211371e730a2b8b79c2ec4d154904e8faa7bed2583c5c6c420230170Word file doc199'680Virustotal results 22 / 62 (35.48)
2024-12-08 12:57:49947bce97211371e730a2b8b79c2ec4d154904e8faa7bed2583c5c6c420230170Word file doc199'680Virustotal results 22 / 62 (35.48)
2024-12-08 08:43:01c9ab3c4481da95348f1d65fecb8da349ecdb1826f16d27ee3e5c5a0d49384c52Word file doc36'352Virustotal results 34 / 58 (58.62)
2024-12-07 14:35:09c243a7dcd332df7a231b33e346a1db91ad01c7f0a17f10ed8dec3efa34743949Executable exe178'176Virustotal results 37 / 72 (51.39)
2024-12-07 14:35:08b7d50f4fb2342f63f86df5da89e7be2d3490adaccb37a5a6df2c1927c46aec60Word file doc198'144Virustotal results 31 / 62 (50.00)
2024-12-07 11:55:06b7d50f4fb2342f63f86df5da89e7be2d3490adaccb37a5a6df2c1927c46aec60Word file doc198'144n/a
2024-12-06 15:43:35e629bbd6a5b5c253f38cea38d156d81e0f0e391b7e7618ff275e31fa0d3a34c6Word file doc36'352Virustotal results 34 / 62 (54.84)
2024-12-06 12:48:34c9ab3c4481da95348f1d65fecb8da349ecdb1826f16d27ee3e5c5a0d49384c52Word file doc36'352n/a
2024-12-06 08:53:074a58b228b23cdc286d103115b2fb312eedf6741aeada17b242620b6737db1035Word file doc48'128n/a
2024-12-06 08:53:0621b7b8656a008ad3e5df1725cddf55e650812c1f3d59609f14c0d3089a886de6Executable exe169'984n/a
2024-12-04 14:49:3739bbdd6c2272bd92dfb169a62201e5625f2b68b0a1fba630c4d3173536315e4162'125n/a
2024-11-26 22:27:0525350f356b356c9ab48ebfcca67cad970d1a213f8716a1d006d339a38f0f7cc5Executable exe1'755'648n/a
2024-11-23 05:51:14aa3050236bf0a757080986a42d53699fd38d78c31f65f12b4934c9236ce70a1262'125Virustotal results 6 / 63 (9.52)
2024-11-23 05:51:145ae3bc20b42773c837d313a5d1c4b46f6f4ea06ba708b73c62c28a0cb576828e62'125Virustotal results 6 / 63 (9.52)
2024-10-18 08:27:1172873fc57bef089ff09181fda339003de51f91ee58b41976ae1ebaf3ad7dd31e62'852Virustotal results 8 / 63 (12.70)
2024-10-15 22:04:4172873fc57bef089ff09181fda339003de51f91ee58b41976ae1ebaf3ad7dd31e62'852n/a
2024-09-24 12:36:0531ea0b97393741bcea9df8e044162bc159209f61d71792452119791badf14322Executable exe46'592Virustotal results 56 / 71 (78.87)
2024-09-24 12:36:05f770b7e25d959f700c9119cb1d9a5ef444634a335ea9f230f06b51fdaa487ad1Executable exe46'592Virustotal results 58 / 73 (79.45)
2024-09-24 12:35:07c69792d8a8ef30f50d118949aee702a01be0cafb4e9f6c9b544a8bb193ea5994Executable exe46'592Virustotal results 54 / 70 (77.14)
2024-08-26 17:22:06276874edc2fa8fab8faad76b95f323b6e01bea7a058053c4ea674adfc51c59edExecutable exe363'008Virustotal results 40 / 75 (53.33)
2024-08-11 12:30:08e6b89b5c3f4e18e76b372fb4d9d7c45b77b1454e43c1f02223c83cff04e24294Executable exe174'592Virustotal results 37 / 74 (50.00)
2024-08-11 11:24:05e6b89b5c3f4e18e76b372fb4d9d7c45b77b1454e43c1f02223c83cff04e24294Executable exe174'592Virustotal results 37 / 75 (49.33)
2024-08-02 11:07:07430271b766cde1c5544b76dd4f8360e312465049a60e9fa197aa4dde1e0de8f7Executable exe46'592n/a
2024-07-27 06:56:42a5f629e62e8012c0ead81b462bc05ec9d20395af3121f87961f9d2dfde908895Executable exe629'724Virustotal results 22 / 74 (29.73)
2024-07-26 21:01:3254eafd9bd8105444ccd57e92dc3bee43166532da0a71e26686fe9913956f6243Executable exe259'584Virustotal results 37 / 74 (50.00)
2024-07-26 16:04:13314dd9f3d257729323aa2dfaaf312b7cd54dbcc2214721eea0863a9b6353cf7aExecutable exe257'536Virustotal results 38 / 75 (50.67)
2024-07-26 11:09:0438b26e2364bc081a90145838451341f14bda3cbd15bba54bf0114cab5d2f8667Executable exe154'112Virustotal results 26 / 73 (35.62)
2024-06-21 07:08:05ac781121f63db7be4e5c79ea106118ce2c7a06f0abef01be3e54ff77351691e2Executable exe226'816Virustotal results 29 / 65 (44.62)
2024-06-21 05:49:06dc787902ffa15a1b58362cbe8c53af008bf2902426d091bf8e662070a20e8a5aExecutable exe226'304Virustotal results 47 / 74 (63.51)
2024-04-17 11:04:05373c2274f9add075ba56475a4ac45a313b118fbf88c2025923870c25e794a1a7Executable exe46'592Virustotal results 48 / 70 (68.57)
2024-04-17 11:04:05373c2274f9add075ba56475a4ac45a313b118fbf88c2025923870c25e794a1a7Executable exe46'592Virustotal results 48 / 70 (68.57)
2024-04-17 11:04:05373c2274f9add075ba56475a4ac45a313b118fbf88c2025923870c25e794a1a7Executable exe46'592Virustotal results 48 / 70 (68.57)
2024-03-31 07:36:064edcb51c961470638828b8f48a0259fb4b9645192f0b30e1d79b789c9b4c4d7fExecutable exe46'592Virustotal results 43 / 71 (60.56)
2024-03-03 02:01:06d46c6abe67f46697485c15d69ac0a3713cfaff30877242634ea57f5d68401415Executable exe211'456n/a
2024-02-19 10:01:11470470a8a54f301dd1a5dd1ab7d9941ef725f695d12a704e4d23b23629afcf96Executable exe335'504n/a

Number of entries displayed: 63 (max: 1'000)