Stealc malware

Stealc is a native information stealer sold as malware-as-a-service. It targets browsers, wallets and messaging applications, with its C2 address and strings protected by simple encoding in the binary.

Malva.RE has analysed 1 public sample tagged Stealc, statically and without execution. The latest public sample was seen on 2026-01-19.

File types

  • PE Executable1

Recurring C2 endpoints

  • hxxp://23[.]94[.]252[.]1711

Defanged. Extracted statically from the configurations of public samples.

Latest public Stealc samples

Sample Type First seen
6671046420956036fa3864b4fe5c85fb90be5b734eb76e01bf78d2aa7432ee06 PE Executable 2026-01-19

Analyse your own Stealc sample

Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.

Analyse a file for free
An error has occurred. This application may no longer respond until reloaded. Reload 🗙