tlp:white,ms-caro-malware:malware-type="HackTool",poshc2 beacon, C2,misp-galaxy:course-of-action="PowerShell Mitigation",misp-galaxy:course-of-action="Network Sniffing Mitigation",misp-galaxy:course-of-action="Credential Dumping Mitigation"