Analysis

  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03-10-2024 08:37

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:83 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\AnyDesk.msix.appx";Add-AppxPa ckage <<<< $appx_file;if( -not $? ) {exit -1;};Start-Sleep -s 2;$line = Get-Wi nEvent Microsoft-Windows-AppxDeploymentServer/Operational -Oldest | Select-Obje ct -Last 100 | Where-Object { $_.Id -eq '400' } |Select-Object -Last 1 | Select Message;$line = $line.Message | Out-String -Width 999;if( $line -eq '' -or $li ne -eq $null ) {Write-Output 'Failed to find installed appx package'; exit -1;} ;$appx_name = $line.Split('_')[0].Split(' ')[-1];if( $appx_name -eq '' -or $app x_name -eq $null ) {Write-Output 'Failed to parse installed appx package'; exit -1;};$xml_path = (Get-AppxPackage $appx_name).InstallLocation + '\AppxManifest .xml';$appx_family = (Get-AppxPackage $appx_name).PackageFamilyName;if (-not (T est-Path -Path $xml_path)) {exit -1;};[xml]$xml_data = Get-Content -Path $xml_p ath;$appx_type = $xml_data.Package.Applications.Application.Id;$appx_family + ' !' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    AnyDesk.msix.appx

  • Size

    5.9MB

  • MD5

    3f32a9a0c8e94c262518782021d99c9d

  • SHA1

    ff617d99a6d8e44646983badf8c6403735ef9fa0

  • SHA256

    30663f0574cd075b83fe01ed7e639000029132536a493ed88cdc1f2f2c012890

  • SHA512

    d82ddcfcce5be49b83f2048bccec8820e0ec1f577083b914b47465c1bfbaccea050c90e3600b673ae18d1040350e0f256179c140c7458f65d730d38127ea2c2a

  • SSDEEP

    98304:9jpbM6FnzWy7bPhxM8ZosGykGk4LNkNsIpCRe20THBgPLxOdUdQEYhy7+HS:f3F6y7b5xM8ZosG1GhLeCReT+PLxOzpy

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads