Analysis

  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    19-03-2024 20:28

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:81 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\Notion-x86.appx";Add-AppxPack age <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get-WinE vent Microsoft-Windows-AppxDeploymentServer/Operational -Oldest | Select-Object -Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Select M essage;$line = $line.Message | Out-String -Width 999;if( $line -eq '' -or $line -eq $null ) {Write-Output 'Failed to find installed appx package'; exit -1;};$ appx_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $appx_ name -eq $null ) {Write-Output 'Failed to parse installed appx package'; exit - 1;};$xml_path = (Get-AppxPackage *$appx_name*).InstallLocation + '\AppxManifest .xml';$appx_family = (Get-AppxPackage *$appx_name*).PackageFamilyName;[xml]$xml _data = Get-Content -Path $xml_path;$appx_type = $xml_data.Package.Applications .Application.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    Notion-x86.appx

  • Size

    120.1MB

  • MD5

    d888a82701f47a2aa94dcddda392c07d

  • SHA1

    f29f2709843006f4cf829a651b788cb20c88133c

  • SHA256

    73db5dee9824c229286ff7161a4827a5bec6c59306d5434dea9e700d5c1def5f

  • SHA512

    4e5baefdc2d46cc7f6f1b41e09d5557fbc525181ed642232daa92b71a16d191ea39719f3dcbdcb548f4aac71d4f9a4498db94aac84229b0186680c89c1015e25

  • SSDEEP

    3145728:G2os7hnR/JIir0tlWmZ0p1DiC6YDCMFXoMqoEdR8Y6pQ5VqoWjxNayi:G2os7h7IiAKLpgC6YDCMFYI8x6krWjx6

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads