Analyzing new features of a crafty implant, from TTPs to indicators