My current setup is a stealer embedded in a malicious rar archive, but haven't had much success since it exploits a WinRAR vulnerablily from a year ago (patched in newer versions) and you don't even need winrar to extract rar archives.
Any ideas that could help me spread it ? thx