NICECURL is a VBScript-based backdoor used by APT42 to download additional modules.
View MITRE record ↗