ViperSoftX malware covertly runs PowerShell using AutoIT scripting

ViperSoftX is an info-stealing malware distributed via malicious RAR archives on torrent sites; it uses a crafted .LNK to run obfuscated PowerShell and AutoIt binaries, leverages the .NET CLR inside AutoIt to execute hidden PowerShell payloads, bypasses AMSI, maintains persistence through scheduled tasks, and exfiltrates system information, clipboard contents and cryptocurrency wallet data to deceptive C2 hostnames.