During the first C&amp;C call, the backdoor sends a pack with the victim’s system information. All further information sent to the C&amp;C is encrypted with a public key framework, making decryption impossible. The commands from the C&amp;C are encrypted in a simpler manner and can be decrypted if intercepted because the secret key is hardcoded in the malware