Infostealer
KeySteal
According to SentinelOne, KeySteal targets files with the .keychain and keychain-db file extensions in the following locations.
KeySteal is a macOS infostealer.
Background
Per SentinelOne, KeySteal goes after files carrying the .keychain and keychain-db extensions in specific locations.
Source: Malpedia (Fraunhofer FKIE).