Ursnif Trojan is back with fileless persistence