Overview
overview
7Static
static
3ryujinx-ca...1).zip
windows10-2004-x64
1ryujinx-ca...1).zip
windows11-21h2-x64
1publish/LICENSE.txt
windows10-2004-x64
1publish/LICENSE.txt
windows11-21h2-x64
3publish/OpenAL32.dll
windows10-2004-x64
1publish/OpenAL32.dll
windows11-21h2-x64
1publish/Ryujinx.exe
windows10-2004-x64
7publish/Ryujinx.exe
windows11-21h2-x64
1publish/SDL3.dll
windows10-2004-x64
1publish/SDL3.dll
windows11-21h2-x64
1publish/THIRDPARTY.md
windows10-2004-x64
3publish/THIRDPARTY.md
windows11-21h2-x64
3publish/alsoft.ini
windows10-2004-x64
1publish/alsoft.ini
windows11-21h2-x64
3publish/av...v2.dll
windows10-2004-x64
1publish/av...60.dll
windows10-2004-x64
1publish/av...60.dll
windows11-21h2-x64
1publish/avutil-58.dll
windows10-2004-x64
1publish/avutil-58.dll
windows11-21h2-x64
1publish/glfw3.dll
windows10-2004-x64
1publish/glfw3.dll
windows11-21h2-x64
1publish/li...rp.dll
windows10-2004-x64
1publish/li...rp.dll
windows11-21h2-x64
1publish/li...rp.dll
windows10-2004-x64
1publish/li...rp.dll
windows11-21h2-x64
1publish/li...io.dll
windows10-2004-x64
1publish/li...io.dll
windows11-21h2-x64
1Analysis
- max time kernel
145s - max time network
154s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
ryujinx-canary-1.3.308-win_x64 (1).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ryujinx-canary-1.3.308-win_x64 (1).zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
publish/LICENSE.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
publish/LICENSE.txt
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
publish/OpenAL32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
publish/OpenAL32.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
publish/Ryujinx.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
publish/Ryujinx.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
publish/SDL3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
publish/SDL3.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
publish/THIRDPARTY.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
publish/THIRDPARTY.md
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
publish/alsoft.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
publish/alsoft.ini
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
publish/av_libglesv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
publish/avcodec-60.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
publish/avcodec-60.dll
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
publish/avutil-58.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
publish/avutil-58.dll
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
publish/glfw3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
publish/glfw3.dll
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
publish/libHarfBuzzSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
publish/libHarfBuzzSharp.dll
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
publish/libSkiaSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
publish/libSkiaSharp.dll
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
publish/libsoundio.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
publish/libsoundio.dll
Resource
win11-20260513-en
General
- Target publish/alsoft.ini
- Size 31B
- Sample260601-add3mshz21
- SHA256 37b67ff73aa4fdd271c32e9652946e2557b0fc94ff460de6fc7983d00ae21f5d
- MD5 c0a92d39626eab678620c85e8eff1730
- SHA1 c616cb514944d07c6c7b6fca1b08286538cff2f2
- SHA512 58e025a7556d564b2e769655d4f439add26981e4a83885e56bcdcaa5bbecc60ee2797a0cc1e3b144cefc818a539973c9f110f6924af5dbb1d4b6c491aa8063e7
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1156 OpenWith.exe