Disconnect the affected machine from the network immediately.
While specific hashes can vary due to polymorphic packing, these are common traits for the 2022-10-31 variant: Onusman_update.exe (inside the ZIP). Onusman_2022-10-31_update.zip
Scans for browser extensions and local files related to cryptocurrency wallets (e.g., MetaMask, Binance). Disconnect the affected machine from the network immediately