      Figure 10. VPNFilter “dstr” third-stage code for writing to raw flash memory      System reconnaissance (0x08) This module is responsible for sending information from the infected device to the C&C server.