SloppyRAT Renamed curl.exe Downloader Activity
Detects the execution of COM files located in the AppData\Local directory with a numeric filename and specific command-line arguments indicative of file transfer or proxying tools like curl/wget wrappers.
Microsoft Sentinel (KQL)
