Usually distributed via YouTube "how-to" videos or gaming forums promising "don" (cheats/mods) for Vice City. Technical Analysis

Once extracted and run, the executable performs an to ensure it isn't in a virtual machine or sandbox.

: Saved passwords, cookies, and credit card info from Chrome, Edge, and Firefox.

: The malware scans the infected system for: