https://unit42.paloaltonetworks.com/darkcloud-stealer-and-obfuscated-autoit-scripting/