: Creation of scheduled tasks or registry "Run" keys to ensure the malware starts with Windows.

: Usually arrives via a "Request for Quotation" (RFQ) or "Payment Advice" phishing email.

: An information stealer targeting credentials and cryptocurrency wallets [1]. Execution Chain :