Behavioral Analysis

TDL_011560751103011IMG.exe "C:\Users\test22\AppData\Local\Temp\TDL_011560751103011IMG.exe"

cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /sc minute /mo 1 /tn "Nano" /tr "'C:\Users\test22\AppData\Roaming\dfxzdg\dfxzdg.exe'" /f

cmd.exe "C:\Windows\System32\cmd.exe" /c copy "C:\Users\test22\AppData\Local\Temp\TDL_011560751103011IMG.exe" "C:\Users\test22\AppData\Roaming\dfxzdg\dfxzdg.exe"