https://unit42.paloaltonetworks.com/javascript-malware-gootloader/