53785.rar | 2027 |

Periodically captures images of the user's desktop.

Sends the stolen data to a Command & Control (C2) server via SMTP (email), FTP , or Telegram Bot API . 5. Network Indicators (IOCs) 53785.rar

It creates a scheduled task or modifies the Windows Registry Run key to ensure it executes upon every system reboot. Periodically captures images of the user's desktop