https://cyble.com/blog/sneaky-xworm-uses-multistaged-attack/