Detects OilRig registry persistence as reported by Nyotron in their March 2018 report
Read the full analysis on IntelFusions