{
	"id": "07ea30ef-01a1-4877-94f0-fbb6e31fc737",
	"created_at": "2026-04-06T00:13:36.623762Z",
	"updated_at": "2026-04-10T03:26:37.648681Z",
	"deleted_at": null,
	"sha1_hash": "59885b057e2ea2c5a0baf5e8cbc92992dfed59e4",
	"title": "GitHub - KekraLoader/Epsilon-Stealer at b258f04b9caf1f00527a7190c7ed00ad17ce96b1",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 152731,
	"plain_text": "GitHub - KekraLoader/Epsilon-Stealer at\r\nb258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nBy KekraLoader\r\nArchived: 2026-04-05 15:00:21 UTC\r\nThe Wayback Machine - https://web.archive.org/web/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nSkip to content\r\nNavigation Menu\r\nActions\r\nAutomate any workflow\r\nPackages\r\nHost and manage packages\r\nSecurity\r\nFind and fix vulnerabilities\r\nCodespaces\r\nInstant dev environments\r\nGitHub Copilot\r\nWrite better code with AI\r\nCode review\r\nManage code changes\r\nIssues\r\nPlan and track work\r\nDiscussions\r\nCollaborate outside of code\r\nhttps://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nPage 1 of 5\n\nGitHub Sponsors\r\nFund open source developers\r\nThe ReadME Project\r\nGitHub community articles\r\nEnterprise platform\r\nAI-powered developer platform\r\nPricing\r\nSign up\r\nNotifications\r\nFork 0\r\nCode\r\nPull requests\r\nActions\r\nProjects\r\nSecurity\r\nInsights\r\nFolders and files\r\nName Name Last commit message Last commit date\r\nLatest commit\r\nIWcommunityFR\r\nUpdate Builder.bat\r\nMar 31, 2024\r\nb258f04 · Mar 31, 2024\r\nHistory\r\nhttps://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nPage 2 of 5\n\nName Name Last commit message Last commit date\r\n71 Commits\r\ntools tools Add files via upload Feb 21, 2024\r\ntrap extension trap extension Add files via upload Feb 21, 2024\r\nBuilder.bat Builder.bat Update Builder.bat Mar 5, 2024\r\nCODE_OF_CONDUCT.md CODE_OF_CONDUCT.md Add files via upload Feb 21, 2024\r\nLICENSE LICENSE Add files via upload Feb 21, 2024\r\nREADME.md README.md Update README.md Mar 24, 2024\r\nREADme.txt READme.txt Update READme.txt Mar 20, 2024\r\nbuilder.py builder.py Add files via upload Feb 21, 2024\r\nindex.js index.js Add files via upload Feb 21, 2024\r\nmain.py main.py Add files via upload Feb 21, 2024\r\nobfuscator.py obfuscator.py Add files via upload Feb 21, 2024\r\nrequirements.txt requirements.txt Add files via upload Feb 21, 2024\r\nEpsilon Stealer LEAK\r\nhttps://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nPage 3 of 5\n\n✨ Join Discord for support and contact (Click me! ) ✨\r\nDiscord Information\r\nNitro\r\nBadges\r\nBilling\r\nEmail\r\nPhone\r\nHQ Friends\r\nHQ Guilds\r\nGift Codes\r\nDiscord Injection\r\nSend token, password, email and billing on login or when email/password is changed\r\nApplication Data\r\nSteam\r\nRiot Games\r\nTelegram\r\nSystem Information\r\nUser\r\nSystem\r\nDisk\r\nNetwork\r\nFile Stealer - Grabs Seed Phrases, Tokens, Private Keys, Recovery Codes, Backup Codes, 2FA codes\r\nGeneral Functions\r\nCheck if being run in a VirusTotal sandbox\r\nAdds file to startup\r\nGrab Browser cookies \u0026 passwords\r\nGrab Crypto Wallets. 🦊 Metamask, ️ Atomic, 👾 Exodus, ️ Binance, 💰 Coinbase, 🟡 Trust, 👻\r\nPhantom ...\r\nopen builder.bat\r\nCet outil est uniquement destiné à des fins éducatives. Il est codé pour vous permettre de voir comment vos\r\nfichiers sont simplement volés et comment agir. Ne pas utiliser à des fins illégales. Nous ne sommes jamais\r\nhttps://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nPage 4 of 5\n\nresponsables d'une utilisation illégale. Educational purpose only!\r\nInformation: Response:\r\nMade By : IW deleted\r\nUser : iwdeleted\r\nServer : https://discord.gg/toolfr\r\nSource: https://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad1\r\n7ce96b1\r\nhttps://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1\r\nPage 5 of 5",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://web.archive.org/20240626101253/https://github.com/KekraLoader/Epsilon-Stealer/tree/b258f04b9caf1f00527a7190c7ed00ad17ce96b1"
	],
	"report_names": [
		"b258f04b9caf1f00527a7190c7ed00ad17ce96b1"
	],
	"threat_actors": [
		{
			"id": "9041c438-4bc0-4863-b89c-a32bba33903c",
			"created_at": "2023-01-06T13:46:38.232751Z",
			"updated_at": "2026-04-10T02:00:02.888195Z",
			"deleted_at": null,
			"main_name": "Nitro",
			"aliases": [
				"Covert Grove"
			],
			"source_name": "MISPGALAXY:Nitro",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "a2b44a04-a080-4465-973d-976ce53777de",
			"created_at": "2022-10-25T16:07:23.911791Z",
			"updated_at": "2026-04-10T02:00:04.786538Z",
			"deleted_at": null,
			"main_name": "Nitro",
			"aliases": [
				"Covert Grove",
				"Nitro"
			],
			"source_name": "ETDA:Nitro",
			"tools": [
				"AngryRebel",
				"Backdoor.Apocalipto",
				"Chymine",
				"Darkmoon",
				"Farfli",
				"Gen:Trojan.Heur.PT",
				"Gh0st RAT",
				"Ghost RAT",
				"Moudour",
				"Mydoor",
				"PCClient",
				"PCRat",
				"Poison Ivy",
				"SPIVY",
				"Spindest",
				"pivy",
				"poisonivy"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434416,
	"ts_updated_at": 1775791597,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/59885b057e2ea2c5a0baf5e8cbc92992dfed59e4.pdf",
		"text": "https://archive.orkl.eu/59885b057e2ea2c5a0baf5e8cbc92992dfed59e4.txt",
		"img": "https://archive.orkl.eu/59885b057e2ea2c5a0baf5e8cbc92992dfed59e4.jpg"
	}
}