Advisory 2020-008: Copy-Paste ... - ACSC | Cyber.gov.au

a payload that attempted to execute a PowerShell reverse shell, a payload that attempted to execute certutil.exe to download another payload, a payload that executed binary malware (identified in this advisory as HTTPCore) previously uploaded by the actor but which had no persistence mechanism, ................
................