Figure2

Figure2

Figure 2 – Code downloading malicious ZIP from C&C server