 The other thread begins by collecting information about the victim, such as the following:  These data points are used to generate a unique victim ID, which is stored in the following registry key:  HKCU\SOFTWARE\Microsoft\HY08A\Build  The malware will continue to decrypt and store embedded C2 URLs.