Analysis

  • max time kernel
    134s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-06-2023 12:49

General

  • Target

    scrcpy-win64-v2.0/avformat-60.dll

  • Size

    495KB

  • MD5

    16b04703e965f7ef0619929f335f5346

  • SHA1

    b905f8ff2a3d1f0e6a6c76831e124b70f3b6ca8f

  • SHA256

    873072d1e592421784058486b6568cfc64e9a7d7354703d825c5c63c22051178

  • SHA512

    02d78adbce07f8db7a0db20a677112526ac50157b464ae6b0b1869f6ce8622f9ad11c42f814d843e6ac1b808fdfd930e8e6fce6fcc38b447a27ae5367d895fec

  • SSDEEP

    12288:F5R4sVoZX6Zz3Il0W+Q4ePKIo/SdEyiFxLGEiT:rRIZwuPKSdYjQ

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\scrcpy-win64-v2.0\avformat-60.dll,#1
    1⤵
      PID:1748
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1748 -s 372
        2⤵
        • Program crash
        PID:3488
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 436 -p 1748 -ip 1748
      1⤵
        PID:1860

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1748-133-0x00007FFBF92A0000-0x00007FFBF9324000-memory.dmp

        Filesize

        528KB

      • memory/1748-134-0x00007FFC0DB50000-0x00007FFC0DB7A000-memory.dmp

        Filesize

        168KB

      • memory/1748-135-0x00007FFBF9090000-0x00007FFBF9293000-memory.dmp

        Filesize

        2.0MB

      • memory/1748-136-0x00007FFBF8D30000-0x00007FFBF9089000-memory.dmp

        Filesize

        3.3MB

      • memory/1748-137-0x00007FFBF8D00000-0x00007FFBF8D27000-memory.dmp

        Filesize

        156KB