According to security researchers from F-Secure who analyzed the piece of malware, the trojan searches for wallet.dat files and sends them to a hotmail address via a Polish SMTP server." from softpedia.
Anyone know what tool that was?
Well, there was someone that was claiming he made DiabloMiner run a lot faster (he called it DiabloMiner II). It popped up on github and sf.net, he stripped the GPL notice and refused to distribute the source on my request, and he ran the binary he built through a bytecode obfuscater.
I ended up DMCAing his shit, and he never responded.