Resubmissions
23-01-2023 18:21
230123-wzbqasgb5w 10General
-
Target
Ryujinx-1.1.0-macos1-macos_universal.app.tar.gz
-
Size
71.5MB
-
MD5
bbe01eeaf102d57866acb4133678a634
-
SHA1
b89d0fb4f28bc7eee20bf6c51e74e313a4e1e756
-
SHA256
259d56bbded1940fb227e01d0e8c0b4ad68dc8f8953f19a6414485427d9c7ae9
-
SHA512
ac75cd59c0b3113063a799382d32dc5c87546f493d919e94e000e3361ae0d7dc965aa8b37bcfcb6bc6c4f3a6a7f545a1fdfa24b4b9a90b320523c22a0c7d33cd
-
SSDEEP
1572864:zbmtbon6WN7RHbeW0m/P6WHnDdvJ0wSzBaV++bqiUGK8p12H:3mJANtWoP6WHDHSzBaE+bLUGK8p0H
Score
10/10
Malware Config
Signatures
-
Async RAT payload 1 IoCs
resource yara_rule static1/unpack002/Ryujinx.app/Contents/MacOS/Ryujinx asyncrat -
Asyncrat family
-
CoreEntity .NET Packer 1 IoCs
A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.
resource yara_rule static1/unpack002/Ryujinx.app/Contents/MacOS/Ryujinx coreentity
Files
-
Ryujinx-1.1.0-macos1-macos_universal.app.tar.gz.gz
-
sample.tar
-
._Ryujinx.app
-
Ryujinx.app/._Contents
-
Ryujinx.app/Contents/._Frameworks
-
Ryujinx.app/Contents/._Info.plist
-
Ryujinx.app/Contents/._MacOS
-
Ryujinx.app/Contents/._PkgInfo
-
Ryujinx.app/Contents/._Resources
-
Ryujinx.app/Contents/.__CodeSignature
-
Ryujinx.app/Contents/Frameworks/._libAvaloniaNative.dylib
-
Ryujinx.app/Contents/Frameworks/._libHarfBuzzSharp.dylib
-
Ryujinx.app/Contents/Frameworks/._libMoltenVK.dylib
-
Ryujinx.app/Contents/Frameworks/._libSDL2.dylib
-
Ryujinx.app/Contents/Frameworks/._libSkiaSharp.dylib
-
Ryujinx.app/Contents/Frameworks/._libarmeilleure-jitsupport.dylib
-
Ryujinx.app/Contents/Frameworks/._libavcodec.59.dylib
-
Ryujinx.app/Contents/Frameworks/._libavutil.57.dylib
-
Ryujinx.app/Contents/Frameworks/._libglfw.3.dylib
-
Ryujinx.app/Contents/Frameworks/libAvaloniaNative.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libHarfBuzzSharp.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libMoltenVK.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libSDL2.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libSkiaSharp.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libarmeilleure-jitsupport.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libavcodec.59.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libavutil.57.dylib.macho macos
-
Ryujinx.app/Contents/Frameworks/libglfw.3.dylib.macho macos
-
Ryujinx.app/Contents/Info.plist.xml
-
Ryujinx.app/Contents/MacOS/Ryujinx.macho macos
-
Ryujinx.app/Contents/PkgInfo
-
Ryujinx.app/Contents/Resources/._Ryujinx.icns
-
Ryujinx.app/Contents/Resources/Ryujinx.icns
-
Ryujinx.app/Contents/Resources/THIRDPARTY.md
-
Ryujinx.app/Contents/_CodeSignature/._CodeResources
-
Ryujinx.app/Contents/_CodeSignature/CodeResources.xml