The decrypted configuration     The main functions of the backdoor + stealer are:  1) Downloading the .NET executable and running it 2) Collecting system information and uploading it to the command-and-control (C&C) server 3) Uploading selected files to the C&C server