I authored this inadequate clipper a while back it supports multiple wallets, persistence via registry & task scheduler, mutex and drop to specified directories. Best practice is to build via garble, thought i should share.
Код:
https://www.pcrisk.com/removal-guides/27148-atlas-clipper
https://cyble.com/blog/multiple-new-clipper-malware-variants-discovered-in-the-wild/
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:Win32/AtlasClipper.SK!MTB
https://www.enigmasoftware.com/atlasclipper-removal/
https://www.cyclonis.com/remove-atlas-clipper/