Trojan:Win32/Stealerc.GAB!MTB removal guide

The Trojan:Win32/Stealerc.GAB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Stealerc.GAB!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Binary file triggered multiple YARA rules

How to determine Trojan:Win32/Stealerc.GAB!MTB?


File Info:
name: 527DFB08ADD6E02A7F05.mlw
path: /opt/CAPEv2/storage/binaries/90543a51b0baa115ebd01037b67fe44a63261fd155274fa76b83adf13a93b750
crc32: 5DBC0301
md5: 527dfb08add6e02a7f05f8a503750f3b
sha1: b2e68be1da603bc764487fe271fb278108ce3de7
sha256: 90543a51b0baa115ebd01037b67fe44a63261fd155274fa76b83adf13a93b750
sha512: 7176801ed79128d3e2273cb7348b1801d8fc5d82c5f2e3dbab6983520144e408c3b2cd54650b27e2c94ec0e3ce42ca163ecadd9478abfbbc5648a31fe4120162
ssdeep: 24576:x0odW7ETxUxv/3BObPdtjyT+nzUhb1NrcvXf5ySRRvse8rO52fi03ah1IMK4eD9s:KodWXW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10F76E57E8191C019D82565F9A9A6076BA31797C916F74CEE02BF143C38B24FEC0677B2
sha3_384: 84c3a0f246d0351484d8a1f042da3b349ba84f05f38786ad860f2bdc4e3286299a9216d07ce0c4f8beabcbc578e3aaee
ep_bytes: 0000508d95f8feffff52ff1534506200
timestamp: 2024-03-26 09:38:18

Version Info:
0: [No Data]

Trojan:Win32/Stealerc.GAB!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Stealerc.1m!c
Elastic	Windows.Trojan.Stealc
MicroWorld-eScan	Gen:Variant.Mikey.164677
FireEye	Generic.mg.527dfb08add6e02a
ALYac	Gen:Variant.Mikey.164677
Cylance	unsafe
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Trojan:Win32/Stealerc.67a90a39
K7GW	Riskware ( 00584baa1 )
BitDefenderTheta	Gen:NN.ZexaF.36802.@tZ@ai5GJHo
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
ClamAV	Win.Malware.Fragtor-10004127-0
BitDefender	Gen:Variant.Mikey.164677
Emsisoft	Gen:Variant.Mikey.164677 (B)
VIPRE	Gen:Variant.Mikey.164677
Trapmine	malicious.moderate.ml.score
Sophos	ML/PE-A
Ikarus	Trojan.Win32.Stealerc
GData	Gen:Variant.Mikey.164677
Antiy-AVL	Trojan/Win32.StealerC
Arcabit	Trojan.Mikey.D28345
Microsoft	Trojan:Win32/Stealerc.GAB!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Stealc.R636928
McAfee	Artemis!527DFB08ADD6
Google	Detected
MAX	malware (ai score=87)
Malwarebytes	Malware.AI.3994692643
Rising	Trojan.Stealerc!8.1840A (TFE:2:P0PgPTGYBiO)
SentinelOne	Static AI – Malicious PE
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)
alibabacloud	Trojan:Win/Stealerc.GAB!MTB

How to remove Trojan:Win32/Stealerc.GAB!MTB?

Trojan:Win32/Stealerc.GAB!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X