Trojan:Win32/Stealc.MD!MTB removal instruction

The Trojan:Win32/Stealc.MD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Stealc.MD!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Trojan:Win32/Stealc.MD!MTB?


File Info:
name: 255A2C419728490E77FE.mlw
path: /opt/CAPEv2/storage/binaries/f1a29aa7f986b4aec1e1d2fe099ab6c7210f69f9bc1a69d4658a51cb4619de44
crc32: CB03B545
md5: 255a2c419728490e77fe549d28830f2f
sha1: 02a695094d9a6dafad6e0692564b19a17066c0ec
sha256: f1a29aa7f986b4aec1e1d2fe099ab6c7210f69f9bc1a69d4658a51cb4619de44
sha512: 5d4a0ab9409a46e7b5ef72216832d8ca7ab4a70d04b01e248d0f97a4eafae1d087f6596f795f1e33c8193252ca1799d10f52553127355c7df65f74e653d73652
ssdeep: 3072:w+QZx7YwQ5jXl9t6Swu6bCYf5z46CyOVfFKyH0OI:PQZ1/Q9jtpf4DHO/KyHR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T161B5D500EA40682EE0A544FFBA9E4BEBE41C3DB91340C0C3EBB16DB925E51F564B556F
sha3_384: f1f319c1b8b68ead960afe14b2af3c225579963e67c03f1de1af3c4b452330a50a2d52b975a43db5528c609ffc9f9b78
ep_bytes: 0300008d8500a9ffff50e8711b000068
timestamp: 2023-09-28 10:26:01

Version Info:
0: [No Data]

Trojan:Win32/Stealc.MD!MTB also known as:

Bkav	W32.Common.32AD6339
Lionic	Trojan.Win32.Stealerc.4!c
Elastic	malicious (high confidence)
ClamAV	Win.Packed.Lazy-10010519-0
FireEye	Generic.mg.255a2c419728490e
Skyhigh	Artemis!Trojan
ALYac	Trojan.Generic.34211704
Cylance	unsafe
Zillya	Trojan.Stealerc.Win32.15689
Sangfor	Infostealer.Win32.Stealerc.Vedo
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.Generic.34211704
K7GW	Riskware ( 00584baa1 )
K7AntiVirus	Riskware ( 00584baa1 )
BitDefenderTheta	Gen:NN.ZexaF.36792.lsZ@augsfEf
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.Win32.Stealerc.pef
Alibaba	TrojanPSW:Win32/Stealc.84b03880
MicroWorld-eScan	Trojan.Generic.34211704
Rising	Stealer.Stealerc!8.17BE0 (TFE:4:o0b9pJWVl6O)
Emsisoft	Trojan.Generic.34211704 (B)
F-Secure	Heuristic.HEUR/AGEN.1366435
VIPRE	Trojan.Generic.34211704
TrendMicro	TROJ_GEN.R002C0DJA23
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	HEUR/AGEN.1366435
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Vidar
Kingsoft	malware.kb.a.983
Microsoft	Trojan:Win32/Stealc.MD!MTB
Arcabit	Trojan.Generic.D20A0778
ZoneAlarm	HEUR:Trojan-PSW.Win32.Stealerc.pef
GData	Win32.Trojan.PSE.1CLKP5K
DeepInstinct	MALICIOUS
Malwarebytes	Malware.AI.3228085437
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0DJA23
Ikarus	Trojan.Win32.Vidar
MaxSecure	Trojan.Malware.215961091.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.94d9a6
Avast	Win32:Evo-gen [Trj]

How to remove Trojan:Win32/Stealc.MD!MTB?

Trojan:Win32/Stealc.MD!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X