MB-7695d9e9d5ec2c380dfb70487b800e700ccc696cb7982b9361bb224890e19123
high
📛 Threat Title
WARDENStealer: launcher.exe
Description
File type: exe. Size: 1096192 bytes. Tags: exe, stealer, Warden, WARDENStealer. Reporter: AmadeyHunter. First seen: 2026-11-02 23:09:03.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
7695d9e9d5ec2c380dfb70487b800e700ccc696cb7982b9361bb224890e19123
IOC database
- Type
- hash_sha256
- Value
7695d9e9d5ec2c380dfb70487b800e700ccc696cb7982b9361bb224890e19123- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- WARDENStealer
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
3b2eac656dafc8f76f1d886b25ca89661af48d2f
IOC database
- Type
- hash_sha1
- Value
3b2eac656dafc8f76f1d886b25ca89661af48d2f- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
a56c203db9d9789fb796a8c7ba683d15
IOC database
- Type
- hash_md5
- Value
a56c203db9d9789fb796a8c7ba683d15- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_imphash
12136f1bcf80e31ed008a3f0349160aa
IOC database
- Type
- hash_imphash
- Value
12136f1bcf80e31ed008a3f0349160aa- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 1096192 bytes. Tags: exe, stealer, Warden, WARDENStealer. Reporter: AmadeyHunter. First seen: 2026-11-02 23:09:03.
Remediations (10)
-
web:blog.gridinsoft.com
WARDEN Stealer may put browser sessions, payment data, and cryptocurrency transfers at risk. WARDEN Stealer is the name used for a Windows x64 stealer, cryptocurrency-address clipper, and loader advertised by an actor called WardenStealer . KrakenLabs observed and documented the advertisement on July 24, 2026.
-
web:cybersecuritynews.com
Warden Stealer spreads via fake downloads and ads, stealing passwords, browser data and crypto wallets with a built-in clipper.
-
web:malware-guide.com
Simple Steps To Eliminate Malicious Application WARDEN Stealer is a dangerous type of malware designed to steal personal and financial information from Windows computers. It is a small program, making it easy for cybercriminals to spread through fake downloads, phishing emails, or malicious websites. Instead of being sold once, WARDEN is offered as a subscription In order to remove WARDEN ...
-
web:malwaretips.com
Learn what Warden Stealer can expose, how to remove it from Windows, and how to recover browser sessions, developer tokens, and cryptocurrency access.
-
web:socprime.com
Warden Stealer is an emerging Rust-based malware-as-a-service infostealer targeting Windows systems. It stands out by collecting configuration files and local data from AI assistants and agentic coding tools.
-
web:thedailytechfeed.com
A new strain of Windows-based infostealer known as Warden Stealer is rapidly gaining traction among cybercriminal circles thanks to a flexible delivery model that includes modified CAPTCHA pages, malvertising, cracked software, and fake game cheats. Launched as a malware-as-a-service operation, it allows operators to customize builds, pick targets, and use their own command-and-control ...
-
web:www.broadcom.com
Warden Stealer Gen Threat Labs has published a report on Warden Stealer, a Rust-based malware-as-a-service infostealer targeting configuration files and local data belonging to AI assistants and agentic coding tools. Distributed through cracked software, game cheats, malvertising, and ClickFix campaigns, the malware heavily obfuscates its builds using code morphing to bypass security scans ...
-
web:www.infostealers.com
Perhaps the most alarming update (v1.9) is Warden's explicit targeting of AI coding agents and developer environments. As evidenced by leaked payload folders, the malware actively targets directories for Claude Code, Codex CLI, Discord, GitHub, and SSH Keys.
-
web:www.joesandbox.com
AI Summary Malware Analysis Report: wardenstealer .zip Executive Summary The submission contains a malicious Windows DLL disguised with an .exe extension and Java-launcher-style exports. Independent inspection identified an associated in-memory DLL, browser-data collection artifacts, and an outbound submission endpoint at svinger.club.
-
web:www.pcrisk.com
WARDEN Stealer is a multi-purpose information stealer, cryptocurrency address clipper, and malware loader built into a single Windows x64 executable. According to research published by KrakenLabs, the threat actor behind WARDEN promotes it on underground forums as a subscription service.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.