Behavioral Analysis

cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /tn {5COA58OA-V7LD-VVME-LIJH-LESBVWGMLVKR} /tr C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}\5OEH.exe /ri 10 /st 00:00 /sc daily /du 9999:59 /f

cmd.exe "C:\Windows\System32\cmd.exe" /c icacls "C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}" /inheritance:e /deny "*S-1-1-0:(R,REA,RA,RD)" "*S-1-5-7:(R,REA,RA,RD)"

cmd.exe "C:\Windows\System32\cmd.exe" /c icacls "C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}" /inheritance:e /deny "SYSTEM:(R,REA,RA,RD)"

cmd.exe "C:\Windows\System32\cmd.exe" /c icacls "C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}" /inheritance:e /deny "Administrators:(R,REA,RA,RD)"

cmd.exe "C:\Windows\System32\cmd.exe" /c icacls "C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}" /inheritance:e /deny "Users:(R,REA,RA,RD)"

cmd.exe "C:\Windows\System32\cmd.exe" /c icacls "C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}" /inheritance:e /deny "test22:(R,REA,RA,RD)"

5OEH.exe "C:\Users\test22\AppData\Local\{PY8FB7HW-FT5Q-FHEK-F5GD-50DG2N98L0QZ}\5OEH.exe"