Exposed BYOB C2 Infrastructure Reveals a Multi-Stage Malware Deployment