Extracted

• • Target
    http://www.gestoria.com.co

  Score

  10^/10

  discoveryexecution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Suspicious clipboard content.

    A suspicious script was copied to clipboard.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Drops file in System32 directory

  behavioral1