Based on the platform, it downloads a file with an encoded shellcode (sc3.txt, x64.txt), and then decodes it (the shellcode is base85 and hex-encoded).      Figure 14. Decoding the Cobalt Strike shellcode     The big module (BIOPASS RAT)