Analysis

  • platform
    windows7_x64
  • resource
    win7-20230824-en
  • resource tags

    arch:x64arch:x86image:win7-20230824-enlocale:en-usos:windows7-x64system
  • submitted
    25-08-2023 23:55

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:86 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\TwchinSetup-x86.appx";Add-App xPackage <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get -WinEvent Microsoft-Windows-AppxDeploymentServer/Operational -Oldest | Select-O bject -Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Sel ect Message;$line = $line.Message | Out-String -Width 999;if( $line -eq '' -or $line -eq $null ) {Write-Output 'Failed to find installed appx package'; exit - 1;};$appx_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $ appx_name -eq $null ) {Write-Output 'Failed to parse installed appx package'; e xit -1;};$xml_path = (Get-AppxPackage *$appx_name*).InstallLocation + '\AppxMan ifest.xml';$appx_family = (Get-AppxPackage *$appx_name*).PackageFamilyName;[xml ]$xml_data = Get-Content -Path $xml_path;$appx_type = $xml_data.Package.Applica tions.Application.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    TwchinSetup-x86.appx

  • Size

    46.5MB

  • MD5

    0e8d41f8b3bbb4eb57c80d1cdcfdbe3c

  • SHA1

    8de4a0fe3a0abe406fcb9a51e5523125df57e469

  • SHA256

    d843357fee8f463e8235fe3e144db173d022a995e9cd8b721c7ed10966551d83

  • SHA512

    bf2dbd2720a533babb6754f896b1030f6ab8b5545b30fd271061c25b090c8a9ecde3370b33f744e6b293e6fd5b7831ce64e0651f41ecdfd84d1cfc64d1e1b116

  • SSDEEP

    786432:QEMMmVPoJoc5CzBMTYe2/g7DaiUrsa05zP3YPHk2mOH0AunxaCYWrc/7R8cNcGjv:QEM9VP2oc5Cd+Yb47eiUIa09KHk2maOc

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads