Here's the Virustotal entry for one of the unpacked versions: https://www.virustotal.com/en/file/18884936d002839833a537921eb7ebdb073fa8a153bfeba587457b07b74fb3

Here's the Virustotal entry for one of the unpacked versions: https://www.virustotal.com/en/file/18884936d002839833a537921eb7ebdb073fa8a153bfeba587457b07b74fb3b2/analysis/ https://www.virustotal.com/en/file/18884936d002839833a537921... Enough evidence for me to believe that the malware exists. Apparently it uses mbed TLS for encryption and communicates via UDP.