Analysis

  • max time kernel
    150s
  • max time network
    96s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    09/09/2024, 16:27

General

  • Target

    publish/Ryujinx.exe

  • Size

    45.3MB

  • MD5

    cbb16a6d8ae1cd416ccd45798dad0639

  • SHA1

    88b2538dfcc6a2967a22b0a1107b92a35c6e937e

  • SHA256

    a927e174ba084f0a0cddfa2977896bc9d1fab6c4c53ef461f8ee58318a07a768

  • SHA512

    c420d0b8bbddbbc84d0c28487d359ab02528b1cf711c31f7991247c0c55837e79c89b9157e89119b5c1514b16f2bd2ec488de4fa296a60ee55c4499afe025548

  • SSDEEP

    393216:i9rYq3hg8TQ0kTJsAVeewdfLAawTwL5mQMw:QrYq3NQ0kdsAVejLKwL5mQMw

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\publish\Ryujinx.exe
    "C:\Users\Admin\AppData\Local\Temp\publish\Ryujinx.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:228

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/228-8-0x000000006D880000-0x000000006DA24000-memory.dmp

          Filesize

          1.6MB

        • memory/228-25-0x0000000064940000-0x0000000064955000-memory.dmp

          Filesize

          84KB

        • memory/228-27-0x0000000068AC0000-0x0000000068AD1000-memory.dmp

          Filesize

          68KB

        • memory/228-26-0x0000000066000000-0x000000006610B000-memory.dmp

          Filesize

          1.0MB

        • memory/228-24-0x000000006B740000-0x000000006B750000-memory.dmp

          Filesize

          64KB

        • memory/228-23-0x0000000063500000-0x00000000635AC000-memory.dmp

          Filesize

          688KB

        • memory/228-22-0x0000000068B40000-0x0000000068B80000-memory.dmp

          Filesize

          256KB

        • memory/228-21-0x0000000062E80000-0x0000000062E9F000-memory.dmp

          Filesize

          124KB

        • memory/228-20-0x0000000064F80000-0x0000000064FCE000-memory.dmp

          Filesize

          312KB

        • memory/228-19-0x00000000676C0000-0x00000000676E1000-memory.dmp

          Filesize

          132KB

        • memory/228-18-0x000000006E7C0000-0x000000006E7DC000-memory.dmp

          Filesize

          112KB

        • memory/228-17-0x00000000626C0000-0x00000000626DA000-memory.dmp

          Filesize

          104KB

        • memory/228-16-0x000000006D240000-0x000000006D288000-memory.dmp

          Filesize

          288KB

        • memory/228-15-0x00000000613C0000-0x0000000061538000-memory.dmp

          Filesize

          1.5MB

        • memory/228-14-0x0000000065880000-0x0000000065898000-memory.dmp

          Filesize

          96KB

        • memory/228-13-0x00000000649C0000-0x0000000064AE5000-memory.dmp

          Filesize

          1.1MB

        • memory/228-12-0x0000000061600000-0x0000000061712000-memory.dmp

          Filesize

          1.1MB

        • memory/228-11-0x0000000061CC0000-0x0000000061CE8000-memory.dmp

          Filesize

          160KB

        • memory/228-10-0x0000000067F00000-0x0000000067F57000-memory.dmp

          Filesize

          348KB

        • memory/228-9-0x0000000066C40000-0x0000000066C4F000-memory.dmp

          Filesize

          60KB

        • memory/228-7-0x0000000070EC0000-0x0000000070FF0000-memory.dmp

          Filesize

          1.2MB

        • memory/228-6-0x000000006F740000-0x000000006F770000-memory.dmp

          Filesize

          192KB

        • memory/228-5-0x00000000693C0000-0x0000000069473000-memory.dmp

          Filesize

          716KB

        • memory/228-4-0x0000000068DC0000-0x0000000068EBE000-memory.dmp

          Filesize

          1016KB

        • memory/228-3-0x000000006BD40000-0x000000006BD69000-memory.dmp

          Filesize

          164KB

        • memory/228-2-0x000000006CF40000-0x000000006CF51000-memory.dmp

          Filesize

          68KB

        • memory/228-1-0x0000000066400000-0x0000000066A43000-memory.dmp

          Filesize

          6.3MB