From Highly Obfuscated Batch File to XWorm and Redline - SANS Internet Storm Center

https://isc.sans.edu/diary/31204

https://twitter.com/home/status/1827965540129730742

https://twitter.com/home/status/1827967526514405825

https://twitter.com/home/status/1828018940552826954