Analysis
-
max time kernel
194s -
max time network
237s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05-05-2023 01:01
General
-
Target
publish/Ryujinx.exe
-
Size
48.4MB
-
MD5
b0797f9198573f3ff62d1e0137fcdc32
-
SHA1
e94a8393e836c3d8a461fa0b64127a8a082a7c62
-
SHA256
201c6a39fb12daa53ba03b1a557acaedfe3bdd550687b39667c49b156ac926e9
-
SHA512
766f27e2597af2bcdb6233cb972fac128297239ec30c721a59cc22cb9832e6a5ec4f5db1e249978570ec75e6780bf11f9e05d0994fed136da9a32757ac8e1f0a
-
SSDEEP
196608:s7at47TJ7z4OW1pBeGh7byud8a8ypl54+b7nsq2kTTYHpGuC9Kmg9iKpzNWb/Uny:2atW17zli9byoplIMlavMGY1wTvq49GJ
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\publish\Ryujinx.exe"C:\Users\Admin\AppData\Local\Temp\publish\Ryujinx.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.3MB
-
Filesize
1.2MB
-
Filesize
164KB
-
Filesize
68KB
-
Filesize
1016KB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.1MB
-
Filesize
60KB
-
Filesize
348KB
-
Filesize
192KB
-
Filesize
716KB
-
Filesize
1.1MB
-
Filesize
160KB
-
Filesize
96KB
-
Filesize
288KB
-
Filesize
112KB
-
Filesize
132KB
-
Filesize
312KB
-
Filesize
124KB
-
Filesize
688KB
-
Filesize
104KB
-
Filesize
64KB
-
Filesize
256KB
-
Filesize
84KB
-
Filesize
312KB
-
Filesize
1.0MB
-
Filesize
280KB
-
Filesize
180KB
-
Filesize
1.4MB
-
Filesize
112KB
-
Filesize
100KB
-
Filesize
172KB
-
Filesize
68KB
-
Filesize
6.3MB
-
Filesize
1.2MB
-
Filesize
1.1MB
-
Filesize
348KB