Kimsuky Orionquests Setup Trojanized Installer

Arnold Chan@slaz

•updated 21 days ago•0•0•0

Detects the Kimsuky trojanized .NET installer OrionQuests-Setup.exe that decrypts embedded AES resource OrionSetup.payload.enc to drop a decoy OrionLauncher installer and malicious LNK file