Cybereason GSOC team released a Threat Analysis Report about new loader called Bumblebee.
Full report about post exploitation activities is available here.
You can find revers engineering report done by a colleague here.