XWorm Cocktail: A Mix of PE data with PowerShell Code - SANS Internet Storm Center

https://isc.sans.edu/diary/31700