ae4c8d37a496b43f8974ba8f07f708e22a9570ba0cddc3dc3a36edbccd4d2a20 | Triage

Analysis

max time kernel
120s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2023, 12:49

Sharing

Report Analysis Logs

General

Target

scrcpy-win64-v2.0/avcodec-60.dll
Size

3.0MB
MD5

e50398267d35880d711df9647fe5dc02
SHA1

8bdd5dff1dd825e3b0c9985ae593cdd59028ba88
SHA256

2686b603a8544493d064449486175b910d79f11630489791d635a621149b9619
SHA512

fe4381faee9c89a2ec5c47340cee6100afcf6af381e6d742a48f02770a002f7acfb4d575cd9071f43ac2fcce12bbb723caae9f8688195a574aba7c7ed5ee4826
SSDEEP

49152:F8O062u2ygwDDAymr9mXl97KFCRWBg9HFTLRtJb+rJA:f0I9Xd9TteJ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
552	656	WerFault.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\scrcpy-win64-v2.0\avcodec-60.dll,#1
1⤵
PID:656
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 656 -s 368
  2⤵
  - Program crash
  PID:552

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 656 -ip 656
1⤵
PID:1344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/656-133-0x00007FF9D93B0000-0x00007FF9D9709000-memory.dmp

Filesize
3.3MB

Download
memory/656-134-0x00007FF9F1330000-0x00007FF9F135A000-memory.dmp

Filesize
168KB

Download
memory/656-135-0x00007FF9D8EF0000-0x00007FF9D90F3000-memory.dmp

Filesize
2.0MB

Download
memory/656-136-0x00007FF9E9AF0000-0x00007FF9E9B17000-memory.dmp

Filesize
156KB

Download