41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05.zip
- SHA256 4ab93529202e7b96f6fccbcefdb3d5b64970fd7b9350fdd2388e040ee52dd001
Password
infected
Behavioral task
behavioral1
Sample
41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05.exe
Resource
win11ltsc2024-20260709-en
OreshkiStealer is a stealer and trojan written in Golang.
| resource | yara_rule |
|---|---|
| static1/unpack001/41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05 | family_oreshki |
Detect suspicious telegram bot.
| resource | yara_rule |
|---|---|
| static1/unpack001/41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05 | suspicious_telegram_bot |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05 |
Detects OreshkiStealer payload
Detect suspicious telegram bot
Detect suspicious telegram bot.
Unsigned PE
Checks for missing Authenticode signature.