Key info:

Extensions
free-vpn-forever
screenshot-saved-easy
weather-best-forecast
crxmouse-gesture
cache-fast-site-loader
freemp3downloader
google-translate-right-clicks
google-traductor-esp
world-wide-vpn
dark-reader-for-ff
translator-gbbd
i-like-weather
google-translate-pro-extension
谷歌-翻译
libretv-watch-free-videos
ad-stop
right-click-google-translate

Network Indicators
Primary C2: www.liveupdt[.]com
Backup C2: www.dealctr[.]com
Additional C2: mitarchive[.]info
CAPTCHA solver: refeuficn.github.io

File Indicators
Steganography marker in logo.png: === (0x3D 0x3D 0x3D)
Storage keys: dipLstCd667, dipLstSig667, dipLstLd667

Tracking
Google Analytics ID: UA-60144933-8