It targets sensitive directories, specifically looking for:
Once extracted and run, the payload performs "anti-VM" and "anti-debug" checks to ensure it isn't being analyzed by security researchers. amigojessica.7z
If you have a of the specific file you're looking at, I can provide a more detailed breakdown of its exact behavior. It targets sensitive directories