The malware is a 500MB pyinstaller. It contains 3 .mp4 files that are actually AES encrypted python scripts. The password is `joogl3epdx4`. The malware installs to `%LOCALAPPDATA%\Alexa\Virtual\`. It takes screenshots and steals Discord tokens and wallet files.
#Malware #Stealer #PyInstaller