URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as XillenStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as XillenStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-01-29 09:27:33	6946edc98e330e7ab257a2a17288297ef8dc1d9de7cd0415640aa1bcb5ee6308	exe	207'872	n/a
2026-01-28 20:16:08	76c055078a4ce834bb4f39c1a371363fe496045247e70edcdcf70ed423a5ff30	exe	2'607'104	n/a
2026-01-20 09:21:08	3265bf6454d7938ad52e73ebce2d6be97a131dcd2f58a87a3d5a5c7aa233b89c	exe	188'928	n/a
2026-01-19 16:34:06	991a9af284a91b109aefe0d29f9feb521ec108d1664ae22d2a4d47b3949208cd	exe	197'120	n/a
2026-01-19 02:46:05	8da1cfcb453aeca76801963c3e50990929e4c0a40847222b93bead34413b342d	exe	199'168	n/a
2026-01-19 02:35:08	8da1cfcb453aeca76801963c3e50990929e4c0a40847222b93bead34413b342d	exe	199'168	n/a

Number of entries displayed: 6 (max: 1'000)