Ostap JavaScript Downloader

Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

ostap

Ostap is a JS downloader, used to deliver other families.

Sets service image path in registry