Trojan

Trojan:Win32/StealerC.SPD!MTB removal

Malware Removal

The Trojan:Win32/StealerC.SPD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/StealerC.SPD!MTB virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan:Win32/StealerC.SPD!MTB?


File Info:

name: 8E571652FD5C8615DFBC.mlw
path: /opt/CAPEv2/storage/binaries/f2b823369cce5c2a53e5d3f7b62239ad7df44b978490d9bc539c18f9b2498910
crc32: E7D62BA4
md5: 8e571652fd5c8615dfbc78532f7ccdb8
sha1: 19f64bb04ba1a507b1ffd1fbeb4da2b4513bac18
sha256: f2b823369cce5c2a53e5d3f7b62239ad7df44b978490d9bc539c18f9b2498910
sha512: 744a85f7958cc551cf26b7e6f4076b953e3a4c9ce3232c9c3f17594efee4afbdad576f8c02ae43d7b103cd182183db37e3c9ae1e6ca9ba86c2cb2704959e947f
ssdeep: 12288:p+aAoVqd9JwRcwNBW8iAiHuQHeHz/kfDL3ZOYOIh9u/ym1/9:pV0JwRcwNBW8iAfQHG/ODNhW9
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T150158D2178C48172EEE320B743ECB73546AEE4B407155ADB46D85BEED7206C27B326C6
sha3_384: 420b4fa7bc26b032ce1ea840da7d52a1f80c0555c19c7f1fb2f1a887d1354c42056d15e6695d478e4bb050b32a6ab9df
ep_bytes: e96cd30300e9d63f0500e97b560400e9
timestamp: 2023-09-28 11:44:12

Version Info:

0: [No Data]

Trojan:Win32/StealerC.SPD!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Stealerc.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Mint.Zard.1
FireEyeGen:Variant.Mint.Zard.1
CAT-QuickHealTrojan.StealercPMF.S31399430
SkyhighBehavesLike.Win32.Smokeloader.cm
ALYacGen:Variant.Mint.Zard.1
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanPSW:Win32/StealerC.ae913a03
K7GWTrojan ( 005add031 )
K7AntiVirusTrojan ( 005add031 )
ArcabitTrojan.Mint.Zard.1
BitDefenderThetaGen:NN.ZexaE.36608.1yW@aaUrgm
VirITTrojan.Win32.GenusT.DSGA
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HUUC
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Babar-10009392-0
KasperskyHEUR:Trojan-PSW.Win32.Stealerc.pef
BitDefenderGen:Variant.Mint.Zard.1
NANO-AntivirusTrojan.Win32.KillProc2.kbjypo
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.10bf2de0
TACHYONTrojan-PWS/W32.Stealerc.881152
EmsisoftGen:Variant.Mint.Zard.1 (B)
F-SecureHeuristic.HEUR/AGEN.1366787
DrWebTrojan.Inject4.61461
VIPREGen:Variant.Mint.Zard.1
TrendMicroTROJ_GEN.R002C0DJ523
SophosTroj/Krypt-ACG
JiangminTrojan.PSW.Stealerc.jd
VaristW32/Kryptik.KRU.gen!Eldorado
AviraHEUR/AGEN.1366787
Antiy-AVLTrojan/Win32.Sabsik
MicrosoftTrojan:Win32/StealerC.SPD!MTB
ZoneAlarmHEUR:Trojan-PSW.Win32.Stealerc.pef
GDataWin32.Trojan-Stealer.Agent.BPA
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R608430
McAfeeGenericRXAA-AA!8E571652FD5C
MAXmalware (ai score=88)
VBA32BScope.TrojanPSW.Mystic
MalwarebytesSpyware.RedLineStealer
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0DJ523
RisingStealer.Stealerc!8.17BE0 (TFE:5:tlfjlaxobNB)
YandexTrojan.Kryptik!SBPvuVA+xUM
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.202870010.susgen
FortinetW32/Injector.ETFD!tr
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan:Win32/StealerC.SPD!MTB?

Trojan:Win32/StealerC.SPD!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment