plugx | 49f6164c2cf7793165ead65d4bea661deea9f7541327521c467482f38d2deea5 | Triage

Resubmissions

19-02-2023 23:24

230219-3d63msgc9y 10

Sharing

General

Target

Ryujinx.exe
Size

46.8MB
Sample

230219-3d63msgc9y
MD5

56cf9039c5449db52e9a61cf2c600edc
SHA1

e9a9072e86c346c594c00f105f6130817330430c
SHA256

49f6164c2cf7793165ead65d4bea661deea9f7541327521c467482f38d2deea5
SHA512

686580524bef85213246c1f5c02f8612a47ac446e5c89e61b043f461f2b5661292c9221f3c252d0e4669910bfc850b851ee1fed07e9f407a5cf3f674bab26104
SSDEEP

196608:yM/x+TLAB7JoyJ1GXLxmxfiaXemGMtv2kTTYHpGuC9Kmg9WxpzNWm34qSKfwEyAu:F/WLABtAXmiSzlaQMqQDRTSx6Iuxx

Score

10^/10

plugx

Malware Config

Targets

- Target
  
  Ryujinx.exe
- Size
  
  46.8MB
- MD5
  
  56cf9039c5449db52e9a61cf2c600edc
- SHA1
  
  e9a9072e86c346c594c00f105f6130817330430c
- SHA256
  
  49f6164c2cf7793165ead65d4bea661deea9f7541327521c467482f38d2deea5
- SHA512
  
  686580524bef85213246c1f5c02f8612a47ac446e5c89e61b043f461f2b5661292c9221f3c252d0e4669910bfc850b851ee1fed07e9f407a5cf3f674bab26104
- SSDEEP
  
  196608:yM/x+TLAB7JoyJ1GXLxmxfiaXemGMtv2kTTYHpGuC9Kmg9WxpzNWm34qSKfwEyAu:F/WLABtAXmiSzlaQMqQDRTSx6Iuxx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2