Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13-11-2024 11:33

General

  • Target

    ryujinx-mirror-master/distribution/macos/create_app_bundle.sh

  • Size

    1KB

  • MD5

    6bbcfc8f6b62093d7250bae625efa34b

  • SHA1

    ae26a57cd9975ac64ec07a24848544f8be23386a

  • SHA256

    d6b4b54afb16aa59bb29aa5500ef9707d6386429224ead53e210bc18f09f47bb

  • SHA512

    cf94023e295125cee954af69a4511410360cbc73f856da93babd46bfac9ec1837356bbd2cb743c005682939d92caeadf635b7f952fdf6bafe4ec7093ea920bfa

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 5 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
    /tmp/ryujinx-mirror-master/distribution/macos/create_app_bundle.sh
    1⤵
      PID:751
      • /bin/rm
        rm -rf /Ryujinx.app
        2⤵
          PID:754
        • /bin/mkdir
          mkdir -p /Ryujinx.app/Contents
          2⤵
          • Reads runtime system information
          PID:759
        • /bin/mkdir
          mkdir /Ryujinx.app/Contents/Frameworks
          2⤵
          • Reads runtime system information
          PID:760
        • /bin/mkdir
          mkdir /Ryujinx.app/Contents/MacOS
          2⤵
          • Reads runtime system information
          PID:761
        • /bin/mkdir
          mkdir /Ryujinx.app/Contents/Resources
          2⤵
          • Reads runtime system information
          PID:763
        • /bin/cp
          cp /Ryujinx /Ryujinx.app/Contents/MacOS/Ryujinx
          2⤵
          • Reads runtime system information
          PID:765

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads