# Establishment of Persistent Backdoor

## Overview
The next phase involves the establishment of a persistent backdoor, allowing continuous access to the compromised network.

## Backdoor Mechanisms
- **Registry Modification**: Autostart entry added under `HKCU\Software\Microsoft\Windows\CurrentVersion\Run`
- **Service Creation**: A new system service designed to run at startup has been detected.

## Analysis
The persistence mechanisms are designed to ensure the ransomware can reinfect the system even after potential removal attempts.

## Next Steps
Efforts will now pivot to detecting lateral movement as threat actors attempt to propagate the infection across the network.