http://www.kitploit.com/2021/12/fileless-xec-stealth-dropper-executing.html
Fileless-Xec - Stealth Dropper Executing Remote Binaries Without Dropping Them On Disk