Skip to content
THE HUNTER’S LEDGER
stealer
EvilSoul-Engine
A Node and Electron stealer-builder forked from the xaitax ChromElevator project and sold as a service. Named by 1 report, 5 detection rules, 1 IOC feed.

← All families

Also written as: EvilSoul Engine. These are the spellings the rules, feeds and profiles use; the page collects all of them.

Reports

Detection rules

YARA rules whose family metadata names this family, by detection page.

Detection rules Jul 2026 · 4 rules · family = EvilSoul-Engine
EvilSoul-Engine: A Brazilian Stealer-Builder Malware-as-a-Service
EvilSoul_Engine_Obfuscator_XOR_Key, EvilSoul_Engine_Maploot_Tinarox_Embed_Titles, EvilSoul_Engine_299a2e7f_SocketIO_WebPanel, EvilSoul_Engine_SplitDomain_AntiGrep
Detection rules Jul 2026 · 1 rule · family = EvilSoul-Engine (xaitax ChromElevator fork)
EvilSoul-Engine: A Brazilian Stealer-Builder Malware-as-a-Service
Tool_xaitax_ChromElevator_EvilSoul_Fork

IOC feeds

IOC feed Jul 2026 · family = KAIDO (Quasar RAT fork) + EvilSoul-Engine (Node/Electron stealer-builder)
EvilSoul-Engine: A Brazilian Stealer-Builder Malware-as-a-Service

A family name here is the label the linked rule, feed or profile carries, normalised to one spelling by _data/families.yml. Where a report declines to name a family, this page does not either.