Threat Actors Abuse Legitimate Tools in Malware Deployment Campaigns