To better conceal the malware, the exploit keeps the binary file encrypted in the RC4 ... “The consistency in tradecraft across disparate targets indicates centralized tool development and operational ...