https://lab52.io/blog/pelmeni-wrapper-new-wrapper-of-kazuar-turla-backdoor/