General

  • Target

    Ryujinx.exe

  • Size

    47.8MB

  • Sample

    230303-ax2caafa9v

  • MD5

    69625dc483aee7233bf6d575a67fc5b3

  • SHA1

    89b864333053f8012b4c9f12279afa17eb630472

  • SHA256

    3220e4dc0dce9af912dfb5880bc28816b33d298c40b52f84d6cda1258fb4e665

  • SHA512

    3e832cddc932385188182ebfb5e220039e3ef23931ffe21a7074aab2f1575b975b9ead6db126a21a20f3b323d20bd7eb1912004a7a5dab1b6d9a09a409217b2b

  • SSDEEP

    196608:yM/x+TLAB7JoyJ1GHLxbta8qi54+b7nsq2kTTYHpGuC9Kmg9WxpzNWA7VPvjQqZ1:F/WLABtAH6iIMlaQMstH/QTqj63DVw

Score
10/10

Malware Config

Targets

    • Target

      Ryujinx.exe

    • Size

      47.8MB

    • MD5

      69625dc483aee7233bf6d575a67fc5b3

    • SHA1

      89b864333053f8012b4c9f12279afa17eb630472

    • SHA256

      3220e4dc0dce9af912dfb5880bc28816b33d298c40b52f84d6cda1258fb4e665

    • SHA512

      3e832cddc932385188182ebfb5e220039e3ef23931ffe21a7074aab2f1575b975b9ead6db126a21a20f3b323d20bd7eb1912004a7a5dab1b6d9a09a409217b2b

    • SSDEEP

      196608:yM/x+TLAB7JoyJ1GHLxbta8qi54+b7nsq2kTTYHpGuC9Kmg9WxpzNWA7VPvjQqZ1:F/WLABtAH6iIMlaQMstH/QTqj63DVw

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks