Malware
WRECKSTEEL
According to CERT-UA, this is a stealer targeting a range of file extensions and creating screenshots of the compromised machine to be then uploaded via cURL.
WRECKSTEEL is a PowerShell malware family.
Background
CERT-UA reports that this is a stealer which goes after a variety of file extensions and captures screenshots of the infected host, then exfiltrates the collected data using cURL.
Source: Malpedia (Fraunhofer FKIE).