tlp:white,circl:incident-classification="malware",osint:source-type="blog-post",misp-galaxy:mitre-enterprise-attack-attack-pattern="Spearphishing Attachment - T1193",misp-galaxy:mitre-enterprise-attack-attack-pattern="PowerShell - T1086"