The malicious package downloads an image from the Web, then uses a steganography module to extract and execute the code to download malware.