Should I remove “Trojan:Win32/Stealc.MD!MTB”?

The Trojan:Win32/Stealc.MD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Stealc.MD!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Trojan:Win32/Stealc.MD!MTB?


File Info:
name: C0AABE0190CEC0FC031E.mlw
path: /opt/CAPEv2/storage/binaries/5be5f6d9b6c0606bdcbe31e3c602bf8d0c5b56b726791a9cfd74c15eff5de346
crc32: B04CA1A6
md5: c0aabe0190cec0fc031e231825ef5023
sha1: 5bee0e192ccc988dcd559cbe46801291bef2adbb
sha256: 5be5f6d9b6c0606bdcbe31e3c602bf8d0c5b56b726791a9cfd74c15eff5de346
sha512: 88c3ad7710a2b5bf458d1749d3e0e0a3e07288b7f8f3b60e55e7f10d3cb4271ed4010cfb098a92978bbc3da1c3c399fb5d08b8fc69958fc3cfc8a1771c735b78
ssdeep: 1536:xHg47qWPlw/yzQO6PQB6oy5wIay/AOSxGPN0n6p/r2j8YDqavs46msTvmiOWRDZj:Zg471w/yH6ooxFp/5Pr45eROQh+Gs0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177B5C702E900541EE1A542FFB5AE7B9B941C7D390304D0C3EBA16DB819E41FA64BD6BF
sha3_384: 460a6430ed5a9cef1bc7f89e141f79f2f4c03bb168ebf64df7451db0857d3425b1e62b3081b8b4c58e224c7812da3d6c
ep_bytes: 0068e80300008d8530f8ffff50e8ce1b
timestamp: 2024-01-15 06:49:01

Version Info:
0: [No Data]

Trojan:Win32/Stealc.MD!MTB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Mikey.161390
FireEye	Generic.mg.c0aabe0190cec0fc
Malwarebytes	Malware.AI.3819041039
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Mikey.D2766E
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Mikey.161390
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Mikey.161390 (B)
F-Secure	Heuristic.HEUR/Patched.Ren
VIPRE	Gen:Variant.Mikey.161390
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Vidar
Google	Detected
Avira	HEUR/Patched.Ren
Antiy-AVL	Trojan/Win32.Stealc
Kingsoft	malware.kb.a.994
Microsoft	Trojan:Win32/Stealc.MD!MTB
GData	Gen:Variant.Mikey.161390
Varist	W32/Agent.HWM.gen!Eldorado
AhnLab-V3	Trojan/Win.Stealc.R626949
BitDefenderTheta	Gen:NN.ZexaF.36680.lsZ@ay0!tdk
ALYac	Gen:Variant.Mikey.161390
Cylance	unsafe
Rising	Trojan.Stealc!8.17BB5 (TFE:4:HmPZ9VKApBL)
SentinelOne	Static AI – Malicious PE
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.92ccc9
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Stealc.MD!MTB?

Trojan:Win32/Stealc.MD!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X