Renamed FTP.EXE Execution (277a4393-446c-449a-b0ed-7fdc7795244c)

Detects the execution of a renamed "ftp.exe" binary based on the PE metadata fields

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Indirect Command Execution - T1202 (3b0e52ce-517a-4614-a523-1bd5deef6c5e)	Attack Pattern	Renamed FTP.EXE Execution (277a4393-446c-449a-b0ed-7fdc7795244c)	Sigma-Rules	1
Renamed FTP.EXE Execution (277a4393-446c-449a-b0ed-7fdc7795244c)	Sigma-Rules	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	1