Cobalt Strike and Squirrelwaffle | Hackers
SQUIRRELWAFFLE Leverages malspam to deliver Qakbot, Cobalt Strike

Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike
"These infections are also used to facilitate the delivery of additional malware such as Qakbot and Cobalt Strike, two of the most common threats regularly observed targeting organizations around the world," said researchers with Cisco Talos in a technical write-up.
SQUIRRELWAFFLE Leverages malspam to deliver Qakbot, Cobalt Strike