Analysis

  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    04-12-2023 15:01

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:119 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\Microsoft.HEVCVideoExtension_ 8wekyb3d8bbwe.arm64.appx";Add-AppxPackage <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get-WinEvent Microsoft-Windows-AppxDeploymentServ er/Operational -Oldest | Select-Object -Last 100 | Where-Object { $_.Id -eq '40 0' } |Select-Object -Last 1 | Select Message;$line = $line.Message | Out-String -Width 999;if( $line -eq '' -or $line -eq $null ) {Write-Output 'Failed to fin d installed appx package'; exit -1;};$appx_name = $line.Split('_')[0].Split(' ' )[-1];if( $appx_name -eq '' -or $appx_name -eq $null ) {Write-Output 'Failed to parse installed appx package'; exit -1;};$xml_path = (Get-AppxPackage *$appx_n ame*).InstallLocation + '\AppxManifest.xml';$appx_family = (Get-AppxPackage *$a ppx_name*).PackageFamilyName;[xml]$xml_data = Get-Content -Path $xml_path;$appx _type = $xml_data.Package.Applications.Application.Id;$appx_family + '!' + $app x_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.arm64.appx

  • Size

    3.9MB

  • MD5

    6c4d38ac1694e6c2d5993a9a2bfe7e32

  • SHA1

    97e14a1255ea263c2adf75d9549d1a6fab646ca4

  • SHA256

    0818951c5a8d61ad214072be198465d04869375724086dae652cff958d89a804

  • SHA512

    9c3f3c8d8060c7f2168fd809e72e90b151a73910cb32d4d2de0d69545be483dc7b6aed16ad6abcb150121a77852cdd417dcd68a39970307084f452a22ee6e6bc

  • SSDEEP

    98304:GwE36LRH+ZStl1pz0/Wdo6WTga/iQ1dlVYIi4bfhGupc4:Gw3gZStNz0/Wdo1gY1HVYEpGupF

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads