Continuing activity from Sideeinder

REFERENCE:
https://medium.com/@Sebdraven/apt-sidewinder-changes-theirs-ttps-to-install-their-backdoor-f92604a2739?_branch_match_id=497496465731885030
ADVERSARY: