Resubmissions

13/07/2024, 04:14

240713-etre5avgjn 8

Analysis

  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 04:14

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:99 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\[ProductDir]\EsetContextMenu. appx";Add-AppxPackage <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get-WinEvent Microsoft-Windows-AppxDeploymentServer/Operational -Olde st | Select-Object -Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Select Message;$line = $line.Message | Out-String -Width 999;if( $lin e -eq '' -or $line -eq $null ) {Write-Output 'Failed to find installed appx pac kage'; exit -1;};$appx_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $appx_name -eq $null ) {Write-Output 'Failed to parse installed app x package'; exit -1;};$xml_path = (Get-AppxPackage *$appx_name*).InstallLocatio n + '\AppxManifest.xml';$appx_family = (Get-AppxPackage *$appx_name*).PackageFa milyName;[xml]$xml_data = Get-Content -Path $xml_path;$appx_type = $xml_data.Pa ckage.Applications.Application.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    [ProductDir]/EsetContextMenu.appx

  • Size

    180KB

  • MD5

    38832b8b17f417a7e522304de8475dc3

  • SHA1

    7588bd31b76ebe3002014e0dbcfeb83cd8b342a6

  • SHA256

    009cf195f5eaf2449c8e38978259dd62b4f1e66d37a5794d48d6cd216225b1f5

  • SHA512

    b2f91d9775f34049636a1d34242cdced6223468e23faa8ce93a2451a9eab5de422285a0cc4f53209c9e5cf8cc9a9c37275237beb50a6fec383f40807ad106d4e

  • SSDEEP

    3072:dvb8Rg/zvAbcedKQlH1bLwPBu3fg1rq4HdKgAiSuy1N99:dZzIgeEcH1bLIBu3B4HMnX

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads