Analysis

  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 13:12

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:84 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\ProtonVPN-x86.appx";Add-AppxP ackage <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get-W inEvent Microsoft-Windows-AppxDeploymentServer/Operational -Oldest | Select-Obj ect -Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Selec t Message;$line = $line.Message | Out-String -Width 999;if( $line -eq '' -or $l ine -eq $null ) {Write-Output 'Failed to find installed appx package'; exit -1; };$appx_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $ap px_name -eq $null ) {Write-Output 'Failed to parse installed appx package'; exi t -1;};$xml_path = (Get-AppxPackage *$appx_name*).InstallLocation + '\AppxManif est.xml';$appx_family = (Get-AppxPackage *$appx_name*).PackageFamilyName;[xml]$ xml_data = Get-Content -Path $xml_path;$appx_type = $xml_data.Package.Applicati ons.Application.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    ProtonVPN-x86.appx

  • Size

    113.2MB

  • MD5

    062f0bcc0ca26c81c967bce6474b207d

  • SHA1

    dd4e5c542cb029c222623801fe350dda43c688bc

  • SHA256

    76a8a492d459d77936b6fe9c13ecbb73ba26ce0fc730b1986d8f3e1f435bcad4

  • SHA512

    06cf7c980d8b80339f7a3905ed988536083a4b49531c6ad41319734fc2007b868bd763d7509c34fcd82f7b37a9ee09e998f4ecc738f76b001aeb6158a8280340

  • SSDEEP

    3145728:vU1Q48PrFG6Vjk2yOGvDEJ8HJdODgzPnR9Nwou+IePIj/e1:vUorFGv2VRJ83OUjeY/8/e1

Score
1/10

Malware Config

Signatures

Processes

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads