https://www.splunk.com/en_us/blog/security/xworm-shape-shifting-arsenal-detection-evasion.html