The investigation described in this article started with one such file which caught our attention due to the various improvements it brought to this well-known infection vector.

https://securelist.com/the-leap-of-a-cycldek-related-threat-actor/101243/