tlp:white,misp-galaxy:threat-actor="PROMETHIUM",misp-galaxy:threat-actor="NEODYMIUM",ecsirt:malicious-code="malware",osint:source-type="technical-report",osint:source-type="blog-post",misp-galaxy:microsoft-activity-group="PROMETHIUM",misp-galaxy:microsoft-activity-group="NEODYMIUM"