https://dmpdump.github.io/posts/Modified_Xworm_Distribution/
Modified XWORM Distribution by Chinese-Speaking Threat Actor - dmpdump