Analysis

  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    20-06-2024 07:45

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:117 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\PrinterControl4Package_141.2. 441.0_language-hu.appx";Add-AppxPackage <<<< $appx_file;if( -not $? ) {exit -1 ;};Start-Sleep -s 2;$line = Get-WinEvent Microsoft-Windows-AppxDeploymentServer /Operational -Oldest | Select-Object -Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Select Message;$line = $line.Message | Out-String - Width 999;if( $line -eq '' -or $line -eq $null ) {Write-Output 'Failed to find installed appx package'; exit -1;};$appx_name = $line.Split('_')[0].Split(' ')[ -1];if( $appx_name -eq '' -or $appx_name -eq $null ) {Write-Output 'Failed to p arse installed appx package'; exit -1;};$xml_path = (Get-AppxPackage *$appx_nam e*).InstallLocation + '\AppxManifest.xml';$appx_family = (Get-AppxPackage *$app x_name*).PackageFamilyName;[xml]$xml_data = Get-Content -Path $xml_path;$appx_t ype = $xml_data.Package.Applications.Application.Id;$appx_family + '!' + $appx_ type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    PrinterControl4Package_141.2.441.0_language-hu.appx

  • Size

    319KB

  • MD5

    8af36216182bfdadfa532e8a566eee5a

  • SHA1

    bd68d7e9c2c2d195963c5985e8c0c5cc63f88a4c

  • SHA256

    05f728115a9293d1ac4e60399f566809b01ab352951be2c8b5ebff413fa3d87e

  • SHA512

    43e95f3fa76c41bfd179664ea5e0079a08d126c1dc4b501df5f4e81a1b191859d151d7fd995211354aca0998362966e8ec3fda0c5249ff92ae5367c56d85ac42

  • SSDEEP

    6144:VsH9GH/3Qh2mrszkTDqEGIJLGt5HVWqdL4pD2vGHPaee5gT+ZWVG1sobMON:VsHy3Pm4zkAELrGL4p6voP+W+ZWQpMON

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads