CSEduResultStealer

Also known as:EDU_RESULT Python stealersystem_info.txt platform.processor minimal

What is the CSEduResultStealer infostealer, and what data does it steal?

CSEduResultStealer (also known as EDU_RESULT Python stealer and system_info.txt platform.processor minimal) is a CyStack research label for information-stealer traces. CSEduResultStealer targets browser credentials, Discord session tokens, Basic host identity and hardware inventory (OS, hostname, LAN IP, CPU, RAM), Credit-card data (`EDU_RESULT/cards.txt`), Cookies dump (`EDU_RESULT/cookies.txt`) and Archive/wallet scan results (`archives_scanned.txt`). As of 11/10/2026, CyStack's research assesses low attribution confidence.

Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes

Description

Original English

CSEduResultStealer is a CyStack-coined identifier for a minimal five-field Python system_info.txt observed inside 7-11 AUGUST - 31283 LOGS2.part01.rar-style aggregator packs at <HWIDPFX>_<TIMESTAMP>/EDU_RESULT/extracted/ system_info.txt victim folders. The body carries only OS, Hostname, IP Address (LAN, not public), CPU (in Python platform.processor() output format, e.g. Intel64 Family 6 Model 186 Stepping 3, GenuineIntel), and RAM (float GB from psutil.virtual_memory()).

The victim-folder EDU_RESULT/ subtree carries the stealer's harvest categories (archives_scanned.txt, cards.txt, cookies.txt, discord_token.txt) plus an extracted/ sibling with per-category folders (bin/, Browsers/BraveSoftware/, Browsers/Chromium/, etc.). The EDU_RESULT folder-name literal suggests an "educational" Python-project origin, likely one of the hobbyist / open-source stealer scripts indexed under GitHub's stealer-2025 / info-steal / stealer-undetectable Topics covered in public reporting on the GitVenom campaign. Family attribution is provisional pending a published threat-intel mapping for the EDU_RESULT output layout.

Data provided by

Accelerate investigation with professional monitoring solutions

Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.

Explore Threat Intelligence

What is the CSEduResultStealer infostealer, and what data does it steal?

Description

Accelerate investigation with professional monitoring solutions

MITRE ATT&CK technique mapping