Analysis

  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 12:50

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:109 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\Fastcopy 5.4.3\FastCopy\msix\ fastcopy0.appx";Add-AppxPackage <<<< $appx_file;if( -not $? ) {exit -1;};Start -Sleep -s 2;$line = Get-WinEvent Microsoft-Windows-AppxDeploymentServer/Operati onal -Oldest | Select-Object -Last 100 | Where-Object { $_.Id -eq '400' } |Sele ct-Object -Last 1 | Select Message;$line = $line.Message | Out-String -Width 99 9;if( $line -eq '' -or $line -eq $null ) {Write-Output 'Failed to find installe d appx package'; exit -1;};$appx_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $appx_name -eq $null ) {Write-Output 'Failed to parse ins talled appx package'; exit -1;};$xml_path = (Get-AppxPackage *$appx_name*).Inst allLocation + '\AppxManifest.xml';$appx_family = (Get-AppxPackage *$appx_name*) .PackageFamilyName;[xml]$xml_data = Get-Content -Path $xml_path;$appx_type = $x ml_data.Package.Applications.Application.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    Fastcopy 5.4.3/FastCopy/msix/fastcopy0.appx

  • Size

    10KB

  • MD5

    89826107e8d2115ce2810cfdf5d20cf8

  • SHA1

    bfa15c7b3ff9f7543180e7057a627b182f951dcb

  • SHA256

    5f9ea1f5ba6487b8e5b5994e672224f55d3e3cf11aeb03f8fe6245b55eaa6d32

  • SHA512

    1803b43dbb6d0ef82373d48dd40924fe2c4a255c8f884f2f9cd712ddd194a05b2376920412cf5fe2057450e3d8269663da2610c981ce3028d6d2f427e56c85a9

  • SSDEEP

    192:QEQVthv8khSr3q16Q2y/Aadhs64qu8fc0exuSNPOpNXkrwgIUnbVEDluVp/oQm6:QHLZ8khSwSVanstqrc4S0pNXKwgIUbVL

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads