Cybereason GSOC team released a Threat Analysis Report about new loader called Bumblebee.

Full report about post exploitation activities is available here.

You can find revers engineering report done by a colleague here.