It adds itself to the Windows Registry Run keys to survive reboots.
Por_Ela.rar , Fatura_Vencida.rar , Documento_Digital.rar Por_Ela.rar
Once run, it uses DLL Side-Loading to execute malicious code within a legitimate Windows process. 3. Malware Behavior It adds itself to the Windows Registry Run