Peculiar.behaviour.7z Today

: Connections to suspicious IP addresses or non-standard ports (e.g., 4444, 8080).

: A small executable drops the main payload into %TEMP% or %AppData% . Peculiar.Behaviour.7z

Do you have the of the specific file you are looking at? : Connections to suspicious IP addresses or non-standard