"AfterMidnight" enables operators to dynamically load and execute malware payloads over a focus on device. The primary controller disguises like a self-persisting Home windows Service DLL and offers safe execution of "Gremlins" through a HTTPS dependent Listening Article (LP) process called "Octopus". Once installed with a concentrate on equipment