Simply put: malware writers leverage malware specific libraries and groups of like actors will reuse these core libraries when able.  The needle in a haystack problem forever plagues malware research: it’s extremely difficult to find reliable information with malware writers constantly working to undermine or eliminate that information.