Renamed CURL.EXE Execution (7530cd3d-7671-43e3-b209-976966f6ea48)

Detects the execution of a renamed "CURL.exe" binary based on the PE metadata fields

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Renamed CURL.EXE Execution (7530cd3d-7671-43e3-b209-976966f6ea48)	Sigma-Rules	Indirect Command Execution - T1202 (3b0e52ce-517a-4614-a523-1bd5deef6c5e)	Attack Pattern	1
Renamed CURL.EXE Execution (7530cd3d-7671-43e3-b209-976966f6ea48)	Sigma-Rules	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	1