Win32/PSW.CoinStealer [Threat Name] go to Threat

Win32/PSW.CoinStealer.I [Threat Variant Name]

Category trojan
Size 98304 B
Short description

Win32/PSW.CoinStealer.I is a trojan that steals sensitive information. The trojan attempts to send gathered information to a remote machine.


The trojan does not create any copies of itself.

Information stealing

The trojan searches for files which contain any of the following strings in their file name:

  • wallet.dat

Only following folders are searched:

  • %appdata%

The trojan attempts to send the collected files to a remote machine.

The trojan contains a list of (1) FTP addresses. The FTP protocol is used.

Please enable Javascript to ensure correct displaying of this content and refresh this page.