https://www.trendmicro.com/en_us/research/25/i/unmasking-the-gentlemen-ransomware.html