Analysis

  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    02-12-2024 18:38

Errors

Reason
platform exec: Cannot install appx package exit status 65535 The term 'Add-AppxPackage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:108 + $appx_file = "C:\Users\Admin\AppData\Local\Temp\My Program\RockerLegacy\RarEx tPackage.appx";Add-AppxPackage <<<< $appx_file;if( -not $? ) {exit -1;};Start- Sleep -s 2;$line = Get-WinEvent Microsoft-Windows-AppxDeploymentServer/Operatio nal -Oldest | Select-Object -Last 100 | Where-Object { $_.Id -eq '400' } |Selec t-Object -Last 1 | Select Message;$line = $line.Message | Out-String -Width 999 ;if( $line -eq '' -or $line -eq $null ) {Write-Output 'Failed to find installed appx package'; exit -1;};$appx_name = $line.Split('_')[0].Split(' ')[-1];if( $ appx_name -eq '' -or $appx_name -eq $null ) {Write-Output 'Failed to parse inst alled appx package'; exit -1;};$xml_path = (Get-AppxPackage $appx_name).Install Location + '\AppxManifest.xml';$appx_family = (Get-AppxPackage $appx_name).Pack ageFamilyName;if (-not (Test-Path -Path $xml_path)) {exit -1;};[xml]$xml_data = Get-Content -Path $xml_path;$appx_type = $xml_data.Package.Applications.Applic ation.Id;$appx_family + '!' + $appx_type; + CategoryInfo : ObjectNotFound: (Add-AppxPackage:String) [], Com mandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

General

  • Target

    My Program/RockerLegacy/RarExtPackage.appx

  • Size

    23KB

  • MD5

    4ebeb72c7da644a296a0026c061db51d

  • SHA1

    6f94ea0eae2664c8341265d62ff7d871da702a76

  • SHA256

    de451e233072b0d34acecf04ddc38bcad61b56a1e0218041ca0a80ad752baccf

  • SHA512

    b4937191d5a61ebc41497938da51f6c741d3da6a9213e236cd62f82b106d311db597c613bc924c18e3bdc654f3f8526f43cf13ede0f00380ac22382713570153

  • SSDEEP

    384:DBR015ziBz4oqvhFv+qkDmm0fxPZp7SxEDHV6sZd3NsSkI8mvC4j9tEIkTXBHhjA:PYzMzHshFvbkD9oZ06MsZd3w/abEIABS

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads