Note from RenderMan: This post is a writeup by a friend who specializes in malware analysis and tracking who wishes to remain anonymous but wanted to share what they found. More than happy to post such things, so feel free to reach out if you want your research posted anonymously.