URLhaus-PL-98e38c06fa793977e97313ee3a2d530f6b2e14ffffc9fbd2bf1dc24af3d2f078
medium
📛 Threat Title
URLhaus payload: (html) 98e38c06fa793977…
Description
File type: html. Size: 150,598 bytes. First seen: 2026-09-25 11:46:04.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
98e38c06fa793977e97313ee3a2d530f6b2e14ffffc9fbd2bf1dc24af3d2f078
VT: not in VT
IOC database
- Type
- hash_sha256
- Value
98e38c06fa793977e97313ee3a2d530f6b2e14ffffc9fbd2bf1dc24af3d2f078- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- URLhaus payload hash
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: not in VT
hash_md5
32482488c192b4d853b4180febe6f446
VT: not in VT
IOC database
- Type
- hash_md5
- Value
32482488c192b4d853b4180febe6f446- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- URLhaus payload hash
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: not in VT
hash_ssdeep
1536:s/tmptntujpj1oolnpruspi9aemzy8jrnrcjrfjkwyui2tclepu9hguamzarkjk8:svmpt+jh5lwhrfvk2mlq1xmzawkwm2
IOC database
- Type
- hash_ssdeep
- Value
1536:s/tmptntujpj1oolnpruspi9aemzy8jrnrcjrfjkwyui2tclepu9hguamzarkjk8:svmpt+jh5lwhrfvk2mlq1xmzawkwm2- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- ssdeep of URLhaus payload 98e38c06fa793977…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_tlsh
t198e30ac8b6a5b0959373b4f5002f040bb13a786af8589cacf28de5e16fb4559412bf
IOC database
- Type
- hash_tlsh
- Value
t198e30ac8b6a5b0959373b4f5002f040bb13a786af8589cacf28de5e16fb4559412bf- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- TLSH of URLhaus payload 98e38c06fa793977…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Download sample (ZIP, password: infected) URLhaus
- URLhaus payload page URLhaus
Remediations (10)
-
web:boyapi.com
URLhaus Malware URL database - query malicious URLs and download malware samples，目录收录、免费、需要 Auth Key
-
web:docs.spamhaus.com
A payload gets observed in combination with a URL tracked by URLhaus ; The information on a payload changes for a URL tracked by URLhaus (e.g. malware family associated with a payload ).
-
web:github.com
List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications. - InfoSecWarrior/Offensive- Payloads
-
web:github.com
URLhaus is an open platform for sharing malware distribution sites. This repository provides some sample python3 scripts on how to interact with the URLhaus bulk API.
-
web:pipeworx.io
Look up a malware payload file by its MD5 or SHA256 hash in the URLhaus database. Returns file type, size, first/last seen dates, and associated delivery URLs.
-
web:public-api.org
Rate limits vary depending on your usage tier and authentication method. Please refer to the official URLhaus API documentation for specific rate limit details and best practices for handling rate limit errors.
-
web:publicapis.io
Bulk queries and Download Malware Samples Includes API key & authentication setup, code examples in Python, JavaScript and cURL, live uptime status, and the best URLhaus alternatives.
-
web:urlhaus.abuse.ch
Here you can propose new malware urls or just browse the URLhaus database. If you are looking for a parsable list of the dataset, you might want to check out the URLhaus API.
-
web:urlhaus.abuse.ch
URLhaus Database Malware URLs on URLhaus are usually associated with certain tags. Every URL can be associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware URLs. The page below gives you an overview on malware URLs that are tagged with payload . Database Entry
-
web:www.ncsc.gov.ie
The URLhaus platform only report sites (URLs) that are directly being used to distribute malware. This means that the malware distribution site are currently serving a payload . A payload can be any file, such as an executable, a script or a document that can infect or harm a computer once downloaded and executed.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.