Signed MSI files, Raccoon and Amadey are used for installing ServHelper RAT
Although ServHelper has existed since at least early 2019, we detected the use of other malware families to install it. The installation comes as a GoLang dropper, .NET dropper, or PowerShell script.
