Rapuncel-style stealer collection: Filegraber staging with wallet/session artifa

Ibrahim Saud@tektrix

•updated Sep 22, 2026•1•0•5

Detects anomalous file staging activity combined with keyword-matched file access or suspicious Steam application launches, characteristic of the Rapuncel (BoryptGrab) malware's credential and crypto-wallet harvesting routine.