Overview
overview
4Static
static
3ryujinx-mi...inx.sh
ubuntu-18.04-amd64
1ryujinx-mi...inx.sh
debian-9-armhf
1ryujinx-mi...inx.sh
debian-9-mips
1ryujinx-mi...inx.sh
debian-9-mipsel
1ryujinx-mi...AppRun
ubuntu-18.04-amd64
1ryujinx-mi...AppRun
debian-9-armhf
1ryujinx-mi...AppRun
debian-9-mips
1ryujinx-mi...AppRun
debian-9-mipsel
1ryujinx-mi...age.sh
ubuntu-18.04-amd64
4ryujinx-mi...age.sh
debian-9-armhf
4ryujinx-mi...age.sh
debian-9-mips
4ryujinx-mi...age.sh
debian-9-mipsel
4ryujinx-mi..._up.py
windows7-x64
3ryujinx-mi..._up.py
windows10-2004-x64
3ryujinx-mi...lib.py
windows7-x64
3ryujinx-mi...lib.py
windows10-2004-x64
3ryujinx-mi...dle.sh
ubuntu-18.04-amd64
3ryujinx-mi...dle.sh
debian-9-armhf
3ryujinx-mi...dle.sh
debian-9-mips
3ryujinx-mi...dle.sh
debian-9-mipsel
3ryujinx-mi...ava.sh
ubuntu-18.04-amd64
1ryujinx-mi...ava.sh
debian-9-armhf
1ryujinx-mi...ava.sh
debian-9-mips
1ryujinx-mi...ava.sh
debian-9-mipsel
1ryujinx-mi...ess.sh
ubuntu-18.04-amd64
1ryujinx-mi...ess.sh
debian-9-armhf
1ryujinx-mi...ess.sh
debian-9-mips
1ryujinx-mi...ess.sh
debian-9-mipsel
1ryujinx-mi...ipt.sh
ubuntu-18.04-amd64
3ryujinx-mi...ipt.sh
debian-9-armhf
4ryujinx-mi...ipt.sh
debian-9-mips
4ryujinx-mi...ipt.sh
debian-9-mipsel
4Analysis
-
max time kernel
130s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2024 11:33
Static task
static1
Behavioral task
behavioral1
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral5
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral6
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral7
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral8
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral9
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral10
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral11
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral12
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
ryujinx-mirror-master/distribution/macos/bundle_fix_up.py
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
ryujinx-mirror-master/distribution/macos/bundle_fix_up.py
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
ryujinx-mirror-master/distribution/macos/construct_universal_dylib.py
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
ryujinx-mirror-master/distribution/macos/construct_universal_dylib.py
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral18
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral19
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral20
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral21
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral22
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral23
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral24
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral25
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral26
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral27
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral28
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral29
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral31
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral32
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
ryujinx-mirror-master/distribution/macos/bundle_fix_up.py
-
Size
16KB
-
MD5
a471cfce12aa4725bf5315720a79fd98
-
SHA1
6de7be9530ae67422c659d7559931e684ebe0762
-
SHA256
a23f2a23e39296f9f823e6b746e193e6c4b39e8347e71700d37868ab979c84f7
-
SHA512
054968e9cb4a3151ffdce0bbb8bd415aeec368bc41734a5498241147655bd8e06329e2a924efb1f066ced63c2530bae9b74f534dd09d398d596cf7f1b12f1ca8
-
SSDEEP
192:+W7GCoYY5uA3Qj+fTyWBtgryIuH1F3Y+1URwRIYmAqFaRF1ovSm7vsZqfBAHPrnA:+W7GCCgrM3Y+6hYnqFczD43x
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc Process Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid Process 4548 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ryujinx-mirror-master\distribution\macos\bundle_fix_up.py1⤵
- Modifies registry class
PID:1112
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4548