APT36 has established a persistent backdoor using Crimson RAT by modifying the Windows Registry to ensure continued access to the compromised system. This allows the attacker to maintain a foothold within the network even after system reboots.