These archives are typically used as "malspam" attachments. The .rar file contains an executable designed to steal sensitive information from a victim's machine.

Security researchers and malware sandboxes like ANY.RUN and Joe Sandbox have analyzed similar files from this date. Key behaviors include:

This executable is identified as , a trojan that targets stored passwords, cryptocurrency wallets, and browser data. Technical Indicators