misp-galaxy:mitre-attack-pattern="Spearphishing Attachment - T1566.001",misp-galaxy:threat-actor="TA428",misp-galaxy:malpedia="nccTrojan",misp-galaxy:malpedia="Cotx RAT",misp-galaxy:mitre-tool="NBTscan - S0590",misp-galaxy:mitre-attack-pattern="Remote Desktop Protocol - T1021.001",misp-galaxy:sector="Defense",misp-galaxy:sector="Government, Administration",tlp:white,dhs-ciip-sectors:DHS-critical-sectors="government-facilities"