URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as XoriumStealer.

Database Entry

Payload

The table below shows all payloads that have been identified as XoriumStealer.

Firstseen (UTC)	SHA256	File Type	File size	VT
2025-12-29 21:47:07	cc602ccf1bccf62233fc5f6450ea3e3dedfa9d8113cc02488f089df7db92f4d8	exe	471'040	n/a
2025-12-20 20:41:12	331037f720f42e36e2e5c45782fda505c5e736976f006ceca3508e7b1a7ba30e	exe	468'480	n/a

Number of entries displayed: 2 (max: 1'000)