Analysis shows some versions include modules designed to scrape browser cookies and saved passwords (targeting Chrome, Edge, and Discord tokens).
It has been observed attempting to inject code into explorer.exe or svchost.exe to mask its activity. Malicious Capabilities spoofer v0.2.exe
Registry modification, credential harvesting, and disabling of security software. Technical Analysis Summary System Modifications Analysis shows some versions include modules designed to