From initial compromise to containment
Download payload from mega.nz
File extracted using 7z
SETUP.exe running from temp folder
Command executed Processing.vssm.bat
SOC detected suspicious activity
Laptop isolated from network