Unwrap the C2 beacon

A compromised host kept sending short base64 packets to an unknown server. Your sandbox captured one beacon payload below. Reverse engineering of the implant shows it base64-wraps a command after XOR-encrypting it with a repeating key. Recover the plaintext command and submit the flag (HDNA{...}).