ref: https://blog.talosintelligence.com/2021/07/sidecopy.html
https://malware.news/t/copy-cat-of-apt-sidewinder/31093