Behavioral Analysis

cmd.exe "C:\Windows\System32\cmd.exe" /C mkdir C:\Windows\SysWOW64\ivfdbhth\

cmd.exe "C:\Windows\System32\cmd.exe" /C move /Y "C:\Users\test22\AppData\Local\Temp\ntlafyp.exe" C:\Windows\SysWOW64\ivfdbhth\

sc.exe "C:\Windows\System32\sc.exe" create ivfdbhth binPath= "C:\Windows\SysWOW64\ivfdbhth\ntlafyp.exe /d\"C:\Users\test22\AppData\Local\Temp\tofsee.exe\"" type= own start= auto DisplayName= "wifi support"

sc.exe "C:\Windows\System32\sc.exe" description ivfdbhth "wifi internet conection"

sc.exe "C:\Windows\System32\sc.exe" start ivfdbhth

netsh.exe "C:\Windows\System32\netsh.exe" advfirewall firewall add rule name="Host-process for services of Windows" dir=in action=allow program="C:\Windows\SysWOW64\svchost.exe" enable=yes>nul