## Overview
With the execution of the Destover wiper, Hidden Cobra moved to establish persistence within compromised systems by installing backdoors.

## Key Findings
- **Backdoor Types**: Utilized custom malware variants to avoid detection by standard security measures.
- **Persistence Techniques**: Implemented registry key modifications and scheduled tasks to ensure long-term access.
- **Access Points**: Targeted servers and workstations with privileged access.

## Next Steps
The establishment of backdoors allows Hidden Cobra to prepare for lateral movement within the network, specifically targeting financial systems for further exploitation.