### Overview
Analysis indicates that the threat actors have established persistence through a custom backdoor known to be used by the Hellsing group. This backdoor allows continued remote access to compromised systems, facilitating further exploitation and data exfiltration.

### Backdoor Characteristics
- **Backdoor Name:** HellsBackdoor
- **Communication Protocol:** Encrypted HTTP/S
- **C2 Servers:** identified at hellsingc2.net

### Mitigation Strategies
- Deploy network monitoring to identify unusual outbound traffic.
- Isolate compromised systems to prevent lateral movement.

### Next Steps
Investigators should focus on identifying lateral movement within the network, specifically looking for signs of credential dumping and privilege escalation.