NetWire RAT payload

Netwire

Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

Executes dropped EXE

Modifies Installed Components in the registry

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.