Analysis
-
max time kernel
151s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03-05-2023 21:09
General
-
Target
publish/Ryujinx.exe
-
Size
48.4MB
-
MD5
147149000fc338265020784f710db689
-
SHA1
cf030c46b6ba79a7d53f4b1d52afbe445648152b
-
SHA256
506e62f16c34a710b17304ee1285ea44c47265e0aadfb02bae4021e54753331b
-
SHA512
fe9e658fea4f08d240269d479152f1337530d8f7f5210e2d09a2e2fb97360a6589c92c54ace0e49af3d0fd27a21d327da053139188bd82cd21dc882551762ea9
-
SSDEEP
393216:2atW17zli9by6plIMlavMV9+qOOTvq49GR:Tsk9yOxvAnIvq49GR
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\publish\Ryujinx.exe"C:\Users\Admin\AppData\Local\Temp\publish\Ryujinx.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.3MB
-
Filesize
1.2MB
-
Filesize
164KB
-
Filesize
68KB
-
Filesize
1016KB
-
Filesize
1.6MB
-
Filesize
716KB
-
Filesize
192KB
-
Filesize
1.5MB
-
Filesize
1.1MB
-
Filesize
60KB
-
Filesize
348KB
-
Filesize
1.1MB
-
Filesize
160KB
-
Filesize
96KB
-
Filesize
288KB
-
Filesize
112KB
-
Filesize
132KB
-
Filesize
124KB
-
Filesize
256KB
-
Filesize
104KB
-
Filesize
688KB
-
Filesize
84KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
64KB
-
Filesize
180KB
-
Filesize
1.0MB
-
Filesize
280KB
-
Filesize
1.4MB
-
Filesize
172KB
-
Filesize
112KB
-
Filesize
100KB
-
Filesize
68KB