Analysis

  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 08:36

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:79 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\Zoom-x64.appx";Add-AppxPackag e <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get-WinEve nt Microsoft-Windows-AppxDeploymentServer/Operational -Oldest | Select-Object - Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Select Mes sage;$line = $line.Message | Out-String -Width 999;if( $line -eq '' -or $line - eq $null ) {Write-Output 'Failed to find installed appx package'; exit -1;};$ap px_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $appx_na me -eq $null ) {Write-Output 'Failed to parse installed appx package'; exit -1; };$xml_path = (Get-AppxPackage *$appx_name*).InstallLocation + '\AppxManifest.x ml';$appx_family = (Get-AppxPackage *$appx_name*).PackageFamilyName;[xml]$xml_d ata = Get-Content -Path $xml_path;$appx_type = $xml_data.Package.Applications.A pplication.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    Zoom-x64.appx

  • Size

    39.2MB

  • MD5

    7d27ed94ba01dc9c2761af0ed84c616f

  • SHA1

    c2d9ecb9e0496dd21e636a77fac370325b8ae6ef

  • SHA256

    44cac5bf0bab56b0840bd1c7b95f9c7f5078ff417705eeaaf5ea5a2167a81dd5

  • SHA512

    3a4e78e0596b8f08687a51000953b875fd5451af3c8d85824f17c8598cb4ca873eb361ba108b4418f181fb54440414a0985e87746f509bfa33a93a62a2504371

  • SSDEEP

    786432:Y/kkp6DZnYmdRd9YtxYJI/3FIzaXEPfxUwsuVW9maOvMwL9koP+7:YckpeYmdiLeI/3gaEfxUwsuVvaKMwuj7

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads