From a different, clean device , change passwords for your email, banking, and primary social media accounts.
Go to your Google/Discord/Steam settings and "Log out of all other sessions" to invalidate stolen tokens. 💡 Recommendation KachaBadam_new_luciferzip
How to on VirusTotal without opening it. The specific behavior of the "Lucifer" malware family. Best practices for isolating suspicious files in a sandbox. From a different, clean device , change passwords