Overview
overview
4Static
static
3ryujinx-mi...inx.sh
ubuntu-18.04-amd64
1ryujinx-mi...inx.sh
debian-9-armhf
1ryujinx-mi...inx.sh
debian-9-mips
1ryujinx-mi...inx.sh
debian-9-mipsel
1ryujinx-mi...AppRun
ubuntu-18.04-amd64
1ryujinx-mi...AppRun
debian-9-armhf
1ryujinx-mi...AppRun
debian-9-mips
1ryujinx-mi...AppRun
debian-9-mipsel
1ryujinx-mi...age.sh
ubuntu-18.04-amd64
4ryujinx-mi...age.sh
debian-9-armhf
4ryujinx-mi...age.sh
debian-9-mips
4ryujinx-mi...age.sh
debian-9-mipsel
4ryujinx-mi..._up.py
windows7-x64
3ryujinx-mi..._up.py
windows10-2004-x64
3ryujinx-mi...lib.py
windows7-x64
3ryujinx-mi...lib.py
windows10-2004-x64
3ryujinx-mi...dle.sh
ubuntu-18.04-amd64
3ryujinx-mi...dle.sh
debian-9-armhf
3ryujinx-mi...dle.sh
debian-9-mips
3ryujinx-mi...dle.sh
debian-9-mipsel
3ryujinx-mi...ava.sh
ubuntu-18.04-amd64
1ryujinx-mi...ava.sh
debian-9-armhf
1ryujinx-mi...ava.sh
debian-9-mips
1ryujinx-mi...ava.sh
debian-9-mipsel
1ryujinx-mi...ess.sh
ubuntu-18.04-amd64
1ryujinx-mi...ess.sh
debian-9-armhf
1ryujinx-mi...ess.sh
debian-9-mips
1ryujinx-mi...ess.sh
debian-9-mipsel
1ryujinx-mi...ipt.sh
ubuntu-18.04-amd64
3ryujinx-mi...ipt.sh
debian-9-armhf
4ryujinx-mi...ipt.sh
debian-9-mips
4ryujinx-mi...ipt.sh
debian-9-mipsel
4Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2024 11:33
Static task
static1
Behavioral task
behavioral1
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
ryujinx-mirror-master/distribution/linux/Ryujinx.sh
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral5
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral6
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral7
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral8
Sample
ryujinx-mirror-master/distribution/linux/appimage/AppRun
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral9
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral10
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral11
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral12
Sample
ryujinx-mirror-master/distribution/linux/appimage/build-appimage.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
ryujinx-mirror-master/distribution/macos/bundle_fix_up.py
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
ryujinx-mirror-master/distribution/macos/bundle_fix_up.py
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
ryujinx-mirror-master/distribution/macos/construct_universal_dylib.py
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
ryujinx-mirror-master/distribution/macos/construct_universal_dylib.py
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral18
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral19
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral20
Sample
ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral21
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral22
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral23
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral24
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_ava.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral25
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral26
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral27
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral28
Sample
ryujinx-mirror-master/distribution/macos/create_macos_build_headless.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral29
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral31
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral32
Sample
ryujinx-mirror-master/distribution/macos/shortcut-launch-script.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
ryujinx-mirror-master/distribution/macos/construct_universal_dylib.py
-
Size
2KB
-
MD5
01e0620bf16fa81cd686265aa49a75a7
-
SHA1
7d48ea3464a26ccdb3b44cd569038c6771b2e25b
-
SHA256
ad8e5f6a2a967fd8e3cedcdfbeeb08540f341a0e7c47392949bf224e4765864d
-
SHA512
63472ab1710b4c45a16c9aacc6ea37650c271354108fba2898ab0a66a6c03394a3e4dcde6d7b7157fd1d58e18ed456879411594c4a3583b9dfe0b59e1274e041
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc Process Key created \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid Process 4616 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ryujinx-mirror-master\distribution\macos\construct_universal_dylib.py1⤵
- Modifies registry class
PID:772
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4616