Can be configured to automatically launch on system boot.
The .rar typically contains a "Builder" application used to create the final executable ( stub.exe ) sent to victims. Xeno.rar
A technical write-up of the malware's capabilities reveals several potent features: Can be configured to automatically launch on system boot