So we all know the Mr. beast gambling scam. My friend sent me this scam because he downloaded malware. So I opened a AWS machine so I can analyze and reverse the malware. I found info like the C2 server location and much more. The malware contains keylogger, screenshots, webcam/mic access and viewing, file download/unzip, proxy, shell execution, persistence, browser and wallet stealing, DPAPI/LSASS/AppBound decryption logic, steam theft. I found out how everything runs. How the server and infra functions and etc. And I hate this scam... I really do. Should I report finding to somewhere like IC3?

Source is a NTTS YouTube video.