It's closer to a trojan horse talking to its C&C server than a typical RPC scenario. In particular it's the server telling the client to execute arbitrary code

It's closer to a trojan horse talking to its C&C server than a typical RPC scenario. In particular it's the server telling the client to execute arbitrary code in response to a request from the client.