EsqueleStҽaler

EsqueleStealer is a validated Windows information-stealing and loader platform associated with EsqueleSquad. Public samples analyzed in January–February 2025 used a Deno-compiled JavaScript dropper, Nuitka-packed Python components, multi-stage downloads, VM checks, broad Microsoft Defender exclusions, scheduled-task and Run-key persistence, a fodhelper UAC bypass and collection of browser, system, social, gaming and session data. The analyzed build also displayed substantial reliability defects and inflated capability claims, but technical weakness does not eliminate credential-theft and persistence risk.

INFERENCE (confidence: medium): The current profile should be updated through event-level validation rather than by inheriting capabilities from associated personas, channels or adjacent ecosystems.