Overview

overview

10

Static

static

10

Resubmissions

23-01-2023 18:21

230123-wzbqasgb5w 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ryujinx-1.1.0-macos1-macos_universal.app.tar.gz

  • Size

    71.5MB

  • MD5

    bbe01eeaf102d57866acb4133678a634

  • SHA1

    b89d0fb4f28bc7eee20bf6c51e74e313a4e1e756

  • SHA256

    259d56bbded1940fb227e01d0e8c0b4ad68dc8f8953f19a6414485427d9c7ae9

  • SHA512

    ac75cd59c0b3113063a799382d32dc5c87546f493d919e94e000e3361ae0d7dc965aa8b37bcfcb6bc6c4f3a6a7f545a1fdfa24b4b9a90b320523c22a0c7d33cd

  • SSDEEP

    1572864:zbmtbon6WN7RHbeW0m/P6WHnDdvJ0wSzBaV++bqiUGK8p12H:3mJANtWoP6WHDHSzBaE+bLUGK8p0H

Score
10/10
ratcoreentityasyncrat

Malware Config

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

    coreentity

Files

  • Ryujinx-1.1.0-macos1-macos_universal.app.tar.gz
    .gz
  • sample
    .tar
  • ._Ryujinx.app
  • Ryujinx.app/._Contents
  • Ryujinx.app/Contents/._Frameworks
  • Ryujinx.app/Contents/._Info.plist
  • Ryujinx.app/Contents/._MacOS
  • Ryujinx.app/Contents/._PkgInfo
  • Ryujinx.app/Contents/._Resources
  • Ryujinx.app/Contents/.__CodeSignature
  • Ryujinx.app/Contents/Frameworks/._libAvaloniaNative.dylib
  • Ryujinx.app/Contents/Frameworks/._libHarfBuzzSharp.dylib
  • Ryujinx.app/Contents/Frameworks/._libMoltenVK.dylib
  • Ryujinx.app/Contents/Frameworks/._libSDL2.dylib
  • Ryujinx.app/Contents/Frameworks/._libSkiaSharp.dylib
  • Ryujinx.app/Contents/Frameworks/._libarmeilleure-jitsupport.dylib
  • Ryujinx.app/Contents/Frameworks/._libavcodec.59.dylib
  • Ryujinx.app/Contents/Frameworks/._libavutil.57.dylib
  • Ryujinx.app/Contents/Frameworks/._libglfw.3.dylib
  • Ryujinx.app/Contents/Frameworks/libAvaloniaNative.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libHarfBuzzSharp.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libMoltenVK.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libSDL2.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libSkiaSharp.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libarmeilleure-jitsupport.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libavcodec.59.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libavutil.57.dylib
    .macho macos
  • Ryujinx.app/Contents/Frameworks/libglfw.3.dylib
    .macho macos
  • Ryujinx.app/Contents/Info.plist
    .xml
  • Ryujinx.app/Contents/MacOS/Ryujinx
    .macho macos
  • Ryujinx.app/Contents/PkgInfo
  • Ryujinx.app/Contents/Resources/._Ryujinx.icns
  • Ryujinx.app/Contents/Resources/Ryujinx.icns
  • Ryujinx.app/Contents/Resources/THIRDPARTY.md
  • Ryujinx.app/Contents/_CodeSignature/._CodeResources
  • Ryujinx.app/Contents/_CodeSignature/CodeResources
    .xml