https://bac-pac.org/index.php/2017/03/06/new-fileless-malware-uses-dns-queries-to-receive-powershell-commands/