Some code used in the ransomware bear a resemblance to code used in Dridex malware, hinting at a common origin