041fc3abf8578ddcead5a8c4a8be8960b7c4d45b21d3370ee2683605e86a728c

Sharing

Copy URL Twitter E-mail

General

Target
scrcpy-win64-v2.6.1.zip
Size 5.7MB
Sample240829-rb2vcsvgjg
SHA256 041fc3abf8578ddcead5a8c4a8be8960b7c4d45b21d3370ee2683605e86a728c
MD5 791ca8de5abbc2263ebc2c76792fc339
SHA1 ed6105d77da8832ebbfef28d56f8496c5bd70e93
SHA512 c04120f6a94098f8b81705232c7e416b195cf184fb3b2574553c2a7cdc590fb3d3ef7fb8e73e40276842f085dce1c088398625bbd01baf4ec94906d189186771
SSDEEP 98304:L+2B6v06ukGUDoPnG00uRPxENtYAToAI4iMqUvrhq6zPPFE0j+DJWyqmT5uOlA3X:6k6czQosAwthsKi5udq6zXFELD4Url1U
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

android discovery

Malware Config

Targets

- Target
  scrcpy-win64-v2.6.1.zip
- Size 5.7MB
- SHA256 041fc3abf8578ddcead5a8c4a8be8960b7c4d45b21d3370ee2683605e86a728c
- MD5 791ca8de5abbc2263ebc2c76792fc339
- SHA1 ed6105d77da8832ebbfef28d56f8496c5bd70e93
- SHA512 c04120f6a94098f8b81705232c7e416b195cf184fb3b2574553c2a7cdc590fb3d3ef7fb8e73e40276842f085dce1c088398625bbd01baf4ec94906d189186771
- SSDEEP 98304:L+2B6v06ukGUDoPnG00uRPxENtYAToAI4iMqUvrhq6zPPFE0j+DJWyqmT5uOlA3X:6k6czQosAwthsKi5udq6zXFELD4Url1U
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  scrcpy-win64-v2.6.1/AdbWinApi.dll
- Size 105KB
- SHA256 1ad523231de449af3ba0e8664d3af332f0c5cc4f09141691ca05e35368fa811a
- MD5 d79a7c0a425f768fc9f9bcf2aa144d8f
- SHA1 3da9e4c4566bd6d4efeeaf7ceab9e9e83f2f67e5
- SHA512 ff650b98ecc55df6c2cb1b22221b1e71d63c01324f8a8b0f05f1497f5416131f7c33ef2ea17ed323cb2bfdbe7ae1824474544434899d2cb89e9c8c00db7dbb15
- SSDEEP 1536:qwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCPo7n8xcL:qwqD3L8Tezq0et+ui1yJv
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  scrcpy-win64-v2.6.1/AdbWinUsbApi.dll
- Size 71KB
- SHA256 51a61758a6f1f13dd36530199c0d65e227cd9d43765372b2942944cc3296ca2c
- MD5 e6e1716f53624aff7dbce5891334669a
- SHA1 9c17f50ba4c8e5db9c1118d164995379f8d686fb
- SHA512 c47392b6f7d701e78f78e0b0ddce5508ab8d247a4095391e77cd665e955f4938e412ffcb6076534dcad287af4f78d84668496935e71b9bb46a98401522815eb9
- SSDEEP 1536:o72doFmOiHizFbPlspcsbj5ZsP+YeTs1pN7lLx:oSSfN9+YeTs1pNR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  scrcpy-win64-v2.6.1/SDL2.dll
- Size 1.7MB
- SHA256 4f58922f0fcd8eaf25b01ae02eecbf4b2ae99871d7387dcf978fe4cafe5acafe
- MD5 6d9150359477611431ead941ca4d95ff
- SHA1 bbcad514ae19cec745e54409b9283f56c3323f6f
- SHA512 ee860bca449779470e452ba143dded741b85830e8c5812920bc025b4e04d757b94c770c2276a9a6c513f5be808ee7efc2157f0d8ed2c57801cbf454188624dbe
- SSDEEP 49152:R/pNEDkQwwxOVDe5u9xA4kDRDuGRAZdaULx+T2td:R/XNF9a4eRDuGRiaUFa2td
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  scrcpy-win64-v2.6.1/adb.exe
- Size 5.6MB
- SHA256 997324a38d89e3b282306bf25ccaa167c49a35850ac0ab4a169e7a15afa82fc8
- MD5 64daf7cca61d468d26a407d79a7c26a9
- SHA1 51b451089e73c9a03e2f24ab2fc81896d48c6126
- SHA512 5a7bd06326e8ee868a2e6c724bc74bd290acaa00f3442807d3f69489a374a13a3cb41fbaf929c79525bdac319bd9a64ecfaf3cbdb6585ae332a485e911d8370d
- SSDEEP 49152:6F94iUyeKyel8LmardznR2u55qCcWa/MXwxBikLW6x2GnS06d5Ja1ekmBfDnGZLK:wbd0ZZTz7aEoFad5J/GVHt+3h
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  scrcpy-win64-v2.6.1/avcodec-61.dll
- Size 3.2MB
- SHA256 cd818c8f0fff80c040d0c433bbda7ea28d53b65a1e40300f1b5b0a8472fe71d3
- MD5 12987fffdfcfa41440c6c1f3decc5c0e
- SHA1 5cddcf297a2ffe58489742507cc653e6cf899337
- SHA512 63d65dad95759e7dc6bc04431f1a797c7cb39bb2ae8ccb4f37719d0368f2551ad7349895edc34c9fb0848b13e2bc974ab4d600911bfe5803e7db2cda8f427cbe
- SSDEEP 49152:62FfnujSY9Hyjg3a6bHch0jdfr5GI4u06ObbcGIW:6GujSIBch0jdftGI4+O3I
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  scrcpy-win64-v2.6.1/avformat-61.dll
- Size 610KB
- SHA256 499f0c70d6a8e8ef599854f17c45381fe4f6d0da4516b41d00f4adf3765d9962
- MD5 878abb3ce91d38c2b35d76d13d2e4320
- SHA1 3844cf18a59c9a500c51d68b7dddc82df1ae1d3d
- SHA512 6f038956a87932cb8c0abcf2ab6c84a8759b538b7f619ca4983c14ade9cbb305d065d70cfbabacff581b8ea72e009d4f15d025c1f44be536ac33c27f380e49d1
- SSDEEP 12288:Nb+thb1zDN/QmSobPC+jyi1eidQ2CBJrLWEgFuEvC:Nb+FWmSobPXOiLXCr4q
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  scrcpy-win64-v2.6.1/avutil-59.dll
- Size 1011KB
- SHA256 eac3a2142455cd79caa43e8e7277aa5831df30d3b1407d30719be65fc5927256
- MD5 3414cf66d64154b50b4d52b892af0f6b
- SHA1 54fb4b03bf52298b3c4cb9b8b4d2ff6775fa17c7
- SHA512 f5fe021699d8e427710d9185adb84e6321510eee6f339c8c6e06af9e8a4a42023e1c6bedd8c3e79e8ad1916da15c47579a13da457a893aeaa23364dd5427ae78
- SSDEEP 12288:zx7QohAXyg6BJUT94fgfa6C9P01o3SmXRvv9TspznP1:zufXSBJUT94fga6C92oCYR8R
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  scrcpy-win64-v2.6.1/icon.png
- Size 6KB
- SHA256 8e8ca237898faa16014cdd118396af53405b423f3db0508c50cc3edce08eb313
- MD5 9e1ffbd6d2630c3b89be2b9c19c29e8f
- SHA1 72352a8f7e4898eb58bbb16e4fc87463a15fed9e
- SHA512 73dc6cef4ae016e24c6d68c46ad0cdccbc8bdf4be5a6cb4f3e4c96d8e67bed30ea57763f509834963150cb887016edaafeebc33cad21ac6b9f5ecb8b0d82a335
- SSDEEP 96:27FujYQ417TLDFVFz+ZHH299m1BFubPqZr6875tK5zOwQF+bySj5Zfgroobi606I:pQ7TVzSN2ryBQbEO+58nQFAySj5ZL60z
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  scrcpy-win64-v2.6.1/libusb-1.0.dll
- Size 214KB
- SHA256 2d82fce7d8e745084770e51eeee29bf67fa24e76b83fcec886ae51f5c93cf3cb
- MD5 ed36aa73c5156fdc6dcf4d8841a88122
- SHA1 2edb73b0b8241ae8c3e27bb0dd30a87e6ebb6790
- SHA512 8d1be09242052b250f9cc834a219012a163e566906b5b229613e934182d35bdc965a1dfd32a714cb538965d8f587ff94d9486c9aef8b50da4f62b17375cfda18
- SSDEEP 3072:Qn7BMiA/L4IA7m4K30ch+TgNrum0ib9FTnZD1yW9Du+E1YeRz6ZvZ/tKausV0Bf9:QyP/Q1KT0iVXD7AOZvZbyBYP3W
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  scrcpy-win64-v2.6.1/open_a_terminal_here.bat
- Size 5B
- SHA256 843758795a84d0d035a7d277ad29cc1ff1702048b4b61ae74b9e3439ae683423
- MD5 98359f622a36689d7d76e00c28c5636f
- SHA1 2dabc0389dd92cbe254a071958725d8ca7a2467c
- SHA512 46bef76e29bc0ea93e15a32f275a7e0607d978da5e1390d2b336e99fa6531e598e4468c43660adb406ab85964e36b859d402314da4af8f17bc5cb8ab7df0676f
- MD5 SHA1 SHA512
Score

1^/10
behavioral21 behavioral22
- Target
  scrcpy-win64-v2.6.1/scrcpy-console.bat
- Size 51B
- SHA256 b49a3eb642898269e7e690e80f3de17898f966f69e75f11abeb31eb7023b0ee5
- MD5 7b8d3b0d87dd886730d4993af807fae1
- SHA1 2b1a383c41fc2a571165cd2b640a6b8a936d5559
- SHA512 805ad1f121432b0edb22fefecffe76e3071ef1eaba073fab0d57e0bee4c379a34f154dbf9fc980c3412a917969275cf7af4528b36746834693687ed7d0011fdd
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  scrcpy-win64-v2.6.1/scrcpy-noconsole.vbs
- Size 212B
- SHA256 3ccda94c161f18cef07c50d4d3c4913eb883d4b0fe3b939c35fae52784fb1d2b
- MD5 a6adb14566ed94e5d80107aeb0fa5291
- SHA1 4160262f99cc0d34573d6538001430f0c6f8c5ee
- SHA512 29540dfb671b71e3daec748a60324913028d236a458855f971d40a8ac41538c1636b94c6a31469f281419c8bd2f4e1cf8c9f16beb03fa005242c277e1dc08d29
- MD5 SHA1 SHA512
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  scrcpy-win64-v2.6.1/scrcpy-server
- Size 69KB
- SHA256 ca7ab50b2e25a0e5af7599c30383e365983fa5b808e65ce2e1c1bba5bfe8dc3b
- MD5 6f132e77e8881bd91fbf4bb863af3916
- SHA1 1ba1d16ae595b81c944ec0a279b616c483b7fb76
- SHA512 7ae266670c84eced334af4c980e4d35f0ccf17d26d26d529ec977fd6f747c6a3086de5abaa7e1b88a71bb60648b124bf5e5969ab54f8ba05f00c940ab6424134
- SSDEEP 1536:nXFTAjzmUhfYS/EWTfQbV9AOtHLUIcttvAq39EFfExJHHc+mxGp:XUAKQHtHLUI6N2fcZ8+qe
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28 behavioral29
- Target
  scrcpy-win64-v2.6.1/scrcpy.exe
- Size 677KB
- SHA256 2da2bbd1469f03e4dd00dfdbfeaaa6b2379035aa54821840092a672db4313258
- MD5 00fa7e004a9e096505ea9f2ba95d5331
- SHA1 3268b4460da4ea1f80c14d64766c1b8d94ad7552
- SHA512 02ebbf74eead7c7204b9ec757d381089da7eb208d678722f56dbbc10987dcb67cb3d19c40d3426a556083370b1ae192ed81cb97821796ce84ab044ff41c2b19e
- SSDEEP 12288:d2wdn8ZjPcd8dMUH2JEpD2OlcDsSRlz0umem345I7:fdn8ZjESdMUWJEpD2Oar4Zem34K7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral30 behavioral31
- Target
  scrcpy-win64-v2.6.1/swresample-5.dll
- Size 120KB
- SHA256 0a78744e0d25ffe96e038f7a176331eb5a07f7a7db0ed918f2783311cd2af3b5
- MD5 eb4b4b3a24f1deb18cbe2239c5d72457
- SHA1 289cf20b1f0e2312a7b308d85bd378a1c72b1e36
- SHA512 c3ccbed5a08e6653483c65ec4464c7b77ec9560374e2b1a51cbbb4fa12a683701a7ae7c530a9f49954f2c83140d566f45f0c7b1777a2847245dedd8c28ff3bc0
- SSDEEP 1536:ISpK3sW6u/wktvZmEspASQ8I4NH4lzuC9zkbYWO1IWCQWzT0fIoR2:ISpK3sBEwktmja4bIS0fE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32