d8a155b7c180b7ca4cdadd40712b8750b63f3aab48cb5b8a2a39ac2d0d4c5d38 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

scrcpy-win...pi.dll

windows10-2004-x64

3

scrcpy-win...pi.dll

windows11-ltsc_2024-x64

3

scrcpy-win...pi.dll

windows10-2004-x64

3

scrcpy-win...pi.dll

windows11-ltsc_2024-x64

3

scrcpy-win...L2.dll

windows10-2004-x64

1

scrcpy-win...L2.dll

windows11-ltsc_2024-x64

1

scrcpy-win...db.exe

windows10-2004-x64

3

scrcpy-win...db.exe

windows11-ltsc_2024-x64

3

scrcpy-win...61.dll

windows10-2004-x64

1

scrcpy-win...61.dll

windows11-ltsc_2024-x64

1

scrcpy-win...61.dll

windows10-2004-x64

1

scrcpy-win...61.dll

windows11-ltsc_2024-x64

1

scrcpy-win...59.dll

windows10-2004-x64

1

scrcpy-win...59.dll

windows11-ltsc_2024-x64

1

scrcpy-win....0.dll

windows10-2004-x64

1

scrcpy-win....0.dll

windows11-ltsc_2024-x64

1

scrcpy-win...re.bat

windows10-2004-x64

3

scrcpy-win...re.bat

windows11-ltsc_2024-x64

3

scrcpy-win...le.bat

windows10-2004-x64

3

scrcpy-win...le.bat

windows11-ltsc_2024-x64

3

scrcpy-win...le.vbs

windows10-2004-x64

7

scrcpy-win...le.vbs

windows11-ltsc_2024-x64

5

scrcpy-win...er.apk

android-9-x86

scrcpy-win...er.apk

android-10-x64

scrcpy-win...er.apk

android-11-x64

scrcpy-win...py.exe

windows10-2004-x64

3

scrcpy-win...py.exe

windows11-ltsc_2024-x64

3

scrcpy-win...-5.dll

windows10-2004-x64

1

scrcpy-win...-5.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
scrcpy-win64-v3.3.4.zip
Size 6.9MB
Sample260722-w7w17sscle
SHA256 d8a155b7c180b7ca4cdadd40712b8750b63f3aab48cb5b8a2a39ac2d0d4c5d38
MD5 f8d19afaf4ffac808f22ff4882a05f73
SHA1 e4ca3ee2cf54d3bb79a597f868e9fa80a27e79cc
SHA512 e4f6ba90168be3319dba7e4449055331419abe88466dc91b4fa99f88dfd67066f8ed7b4239bb8f55b6f3acbd423e204cf26493dba8efd226ecc38c2e23461cef
SSDEEP 196608:AU544urJvgCHddhjdHhtxOWhlq0tMZBJTJ54rqhtFb:AU54rJvHV5HHxOUpt+FvhHb
TLSH
T1E376331C7BE0082BFC16DF239BA9D98DCF4DB77141BF46D2260B6DD192C9862067A874
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android discovery execution

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

scrcpy-win64-v3.3.4/AdbWinApi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

scrcpy-win64-v3.3.4/AdbWinApi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

scrcpy-win64-v3.3.4/AdbWinUsbApi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

scrcpy-win64-v3.3.4/AdbWinUsbApi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

scrcpy-win64-v3.3.4/SDL2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

scrcpy-win64-v3.3.4/SDL2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

scrcpy-win64-v3.3.4/adb.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

scrcpy-win64-v3.3.4/adb.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

scrcpy-win64-v3.3.4/avcodec-61.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

scrcpy-win64-v3.3.4/avcodec-61.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

scrcpy-win64-v3.3.4/avformat-61.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

scrcpy-win64-v3.3.4/avformat-61.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

scrcpy-win64-v3.3.4/avutil-59.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

scrcpy-win64-v3.3.4/avutil-59.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

scrcpy-win64-v3.3.4/libusb-1.0.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

scrcpy-win64-v3.3.4/libusb-1.0.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

scrcpy-win64-v3.3.4/open_a_terminal_here.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

scrcpy-win64-v3.3.4/open_a_terminal_here.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

scrcpy-win64-v3.3.4/scrcpy-console.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral20

Sample

scrcpy-win64-v3.3.4/scrcpy-console.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral21

Sample

scrcpy-win64-v3.3.4/scrcpy-noconsole.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

scrcpy-win64-v3.3.4/scrcpy-noconsole.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral23

Sample

scrcpy-win64-v3.3.4/scrcpy-server.apk

Resource

android-x86-arm-20260325-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

scrcpy-win64-v3.3.4/scrcpy-server.apk

Resource

android-x64-20260325-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

scrcpy-win64-v3.3.4/scrcpy-server.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

scrcpy-win64-v3.3.4/scrcpy.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

scrcpy-win64-v3.3.4/scrcpy.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

scrcpy-win64-v3.3.4/swresample-5.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

scrcpy-win64-v3.3.4/swresample-5.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  scrcpy-win64-v3.3.4/AdbWinApi.dll
- Size 105KB
- SHA256 9a56e72fe1372cb722a80c00b79dcecf2b37165884e470ed05f00c668c0043b0
- MD5 6b0fc995feef8043a0e043609d52da36
- SHA1 6a233e10d13b8a46a99eadd1bbf94739415d5c32
- SHA512 e2879101e02643bdf243463d76a88717ac4c76989ad313cb4c3c1d0c3d3d2b0433eedb120accdc0f53559d7287ded809b3c7ca73edb5daf77a2d2655627af9ae
- SSDEEP 1536:Awqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP576CM:AwqD3L8Tezq0et+ui1y6S
- TLSH
  T1AFB36A227891C072C8D361B91AECF76593BEF5A10B3589C7339803DACE653C25B7529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  scrcpy-win64-v3.3.4/AdbWinUsbApi.dll
- Size 71KB
- SHA256 5e77ccb2f25cd3a97553745adf1cd28a5fe8137cf64613b7fef9c6f92ff91f37
- MD5 6483ac6efda4e6debe421fc93771ce43
- SHA1 51d506c2e38f22a79aaba722210bec4678559175
- SHA512 58ac20afcbc7312b9673dd3590f5bb145ad43fe7bd7f39f4844ba56729d13bc77ccda98a19304406b7ca810c9af409993b5a8971166b28584adaf0877af00c7b
- SSDEEP 1536:s72doFmOiHizFbPlspcsbj5ZsP+YeTs1pF76CwT:sSSfN9+YeTs1pFG
- TLSH
  T1F5636C227990C432CC9651B819ECE621A67FBA511BB1C4C3779D03DBDE203C1ABB9397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  scrcpy-win64-v3.3.4/SDL2.dll
- Size 1.7MB
- SHA256 5d2d3dff50dc0f29e5664126342c3ae0990dea45a350e6991468ad1be68c1f6c
- MD5 43b0e7ab01de96ccab97458135f63386
- SHA1 86498ac7adea1b09f85efd17b412af965e4596c8
- SHA512 b6b24481c478af5aed49fc96a571dd7875cfc4169b286035f17664f12fcfafd4d01b7f27dfae93af387e957e4d0318e701026bcf30be4e0eb4a3e3be996b7464
- SSDEEP 49152:tuXrXN6/WsJ4DyQbMpmgDehIdPoVTRDOfpaBT81hkCc5MhZOr:UXN6tynINoVRDOfUByhkpyhZO
- TLSH
  T1BA857D1FF2A315ACCB1BC035C257EB726831B41812A4ADBF26D4DB706D22D515B9EE38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  scrcpy-win64-v3.3.4/adb.exe
- Size 6.3MB
- SHA256 1e1c2280b90b3f01ad84cd8df4858b1b1995012814f3ca8893bcc3ba3848edec
- MD5 baa238bba5155683308510d4339b65a4
- SHA1 44225ae13279bb73905a30260a6ff1dd13f7904c
- SHA512 a5935abf0ca06ea671ed810d31d3118be75bb0dda970061b4a9307486d2579175389c6bcc611eb698d253eacc887512c08eb8fb3bbc4d6170815be3316e8b71c
- SSDEEP 196608:2J8L9qOeqIXu17SaRe8P3U8mdOZXhzqzcgGMiS9Xg:2Ji9qOeqIXuFSq3U8mdOTlmQ
- TLSH
  T18E66AE06E153F13AD90311B0626DA3BC6F2446248B218DEBDAD4ECBC2B75DD1357BB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  scrcpy-win64-v3.3.4/avcodec-61.dll
- Size 5.3MB
- SHA256 fbcb887bd8d722abf8680aab207b40e5f9dc6c4364b38aa2423e9d19c29b871c
- MD5 b060e7f5fda9f824c42d5d78aeb8b0bd
- SHA1 991d3987b71291aac49f818d78647df3dcd17e78
- SHA512 137f3380270f3b1d39235db0601f937fb40c108730f1bb4a99082beb4353007adadf00589c34b8e91a850700aeeec0c39746b6d4bb8a7aa2a97c1373a5c7a702
- SSDEEP 98304:iVM88DRfAb4fZSCLB/bz9zaTHV+WB1TTloOOr:skxAbS4CLhb5zaTDTuOOr
- TLSH
  T144469E5FE29362DCD66FC870536BFB23F924341D901479364B85DB307AA2F906A5AF08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  scrcpy-win64-v3.3.4/avformat-61.dll
- Size 614KB
- SHA256 53803062da5690f709a1cc4f4d2a187942ff91c4583497112a2b77dad4802c2f
- MD5 5b977bb2cc8238e23130e3e009c77e66
- SHA1 1d559a54094a769e254a441ead96ee92ee66d141
- SHA512 f4204b9baf1f4b35e66e513e48bab380c01e57a9e68565526fcd068efba40df2d5e0c08f75e3efe7eae5b5169a844450f7c4b05e1dbaadadd69534f98623b9b8
- SSDEEP 12288:jOfSNtylqvgfpCs3pCLE/HlRDHd5IYY/HQFhO8Ks5D7YukJKEY9WcTZ:jO9xfbHl/vYmM8K+PYu/TZ
- TLSH
  T138D46C57D6A314ACC62BC13043A7AB72FB31B86515307EBE2294CB312F46F90675E768
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  scrcpy-win64-v3.3.4/avutil-59.dll
- Size 1007KB
- SHA256 1944d3ee1912f5cb8dfa35d5ef0faec5dabc79d9d45d4f4cd210f2ccdad16332
- MD5 fb69b85010e1d2bfb1b3ff4cef1d5f90
- SHA1 3d8751ba2490508c77f074b303340b61f7f719bd
- SHA512 21fd66263c0e293c2633f5cf1bcfe1b6739eadf99f6fd8e27465f4724a09122499703f6faf254a8bc76593378f66d133fe56141351ee2aa4dbe9b6805c433a79
- SSDEEP 12288:piIDbY+wrSyitlA8MD43gtZoI/Ucq/ZhCALyYR+f6lWc12O:pG+xHlA8MD43gtZosqx1LyfIn
- TLSH
  T113254B01A5E3542DC5AA913046EB7657B6313452CA60BE6F67A18D303F28F912ECFF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  scrcpy-win64-v3.3.4/libusb-1.0.dll
- Size 210KB
- SHA256 5652bf292115277c9e7edca389e0fd398e3b26ef3ff007a181e21702e913afab
- MD5 52aac0e3484f68afc550e001bcb7aba6
- SHA1 b5ca77003be84840a559e18edfe55c3cb57a624e
- SHA512 cb71ddfd17b3c3036a6565ab2c25fe4e42364420baa1b1104f84f840e344d98063b9ee8f01633b78b282504065f68ba2544f716f868818e69a4d18263819f214
- SSDEEP 3072:8zBm3BWB8/lh/7uxgv/GedRCFSjvSq5MziKavoEsVeRzqT/uaZvZ0n34EX9RfyPm:3p/Df3RCojAziXvyAc/uaZvZk/6P3W
- TLSH
  T172248C5B12E79C7CC547C0305AC3C972E971F4280722EDBF12A8C9391F42EA2A75ED69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  scrcpy-win64-v3.3.4/open_a_terminal_here.bat
- Size 5B
- SHA256 843758795a84d0d035a7d277ad29cc1ff1702048b4b61ae74b9e3439ae683423
- MD5 98359f622a36689d7d76e00c28c5636f
- SHA1 2dabc0389dd92cbe254a071958725d8ca7a2467c
- SHA512 46bef76e29bc0ea93e15a32f275a7e0607d978da5e1390d2b336e99fa6531e598e4468c43660adb406ab85964e36b859d402314da4af8f17bc5cb8ab7df0676f
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17 behavioral18
- Target
  scrcpy-win64-v3.3.4/scrcpy-console.bat
- Size 51B
- SHA256 b49a3eb642898269e7e690e80f3de17898f966f69e75f11abeb31eb7023b0ee5
- MD5 7b8d3b0d87dd886730d4993af807fae1
- SHA1 2b1a383c41fc2a571165cd2b640a6b8a936d5559
- SHA512 805ad1f121432b0edb22fefecffe76e3071ef1eaba073fab0d57e0bee4c379a34f154dbf9fc980c3412a917969275cf7af4528b36746834693687ed7d0011fdd
- TLSH
  T1C6900217462A49865646C821548B30C5F54641C166154EA22262407179C85524F542D2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral19 behavioral20
- Target
  scrcpy-win64-v3.3.4/scrcpy-noconsole.vbs
- Size 212B
- SHA256 3ccda94c161f18cef07c50d4d3c4913eb883d4b0fe3b939c35fae52784fb1d2b
- MD5 a6adb14566ed94e5d80107aeb0fa5291
- SHA1 4160262f99cc0d34573d6538001430f0c6f8c5ee
- SHA512 29540dfb671b71e3daec748a60324913028d236a458855f971d40a8ac41538c1636b94c6a31469f281419c8bd2f4e1cf8c9f16beb03fa005242c277e1dc08d29
- TLSH
  T16DD0C007DFBDD90301130013C8306C0BCCC10E99220308B3AFA4FC181A8C5E808F58C7
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral21 behavioral22
- Target
  scrcpy-win64-v3.3.4/scrcpy-server
- Size 88KB
- SHA256 8588238c9a5a00aa542906b6ec7e6d5541d9ffb9b5d0f6e1bc0e365e2303079e
- MD5 9153cfe86c4cac296581d022889683af
- SHA1 0c59e62634a96acbb40e68b5be9a08fcef162e22
- SHA512 697e54771720a751304202520660524920ad9c95dcb1f3ce15f680f74aa0067dab3677c500255100eba7bb3184db6799e41025c25d51eb9b4e66203f68bffb0d
- SSDEEP 1536:WVaFGrv1G7MJJ5gvwUiJ6CDrwENFZYIjWYAl9fOxF6RkOfHTgE:E1T1B6vtIwEWIjWYMqF6RBfHTgE
- TLSH
  T12C9302378A8FC839CCE08A7725A94733F5BF6095111A85B307FF9A966740B5A207379C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25
- Target
  scrcpy-win64-v3.3.4/scrcpy.exe
- Size 698KB
- SHA256 9f9116940988d9e4bc710812e2fdd4b5ecb767e591eaf043b1e2dd7d98166f98
- MD5 b462d800ba714e8e301aa0a6b8dceed8
- SHA1 4e70c516dc4018b122561b007285eca14b68e5c0
- SHA512 4e81fab364612ccec84dcee3b4fe24f531dad0c4ea5c06d3b0fc9671b16f92164d81f267319c256a345d3f89f6154400cb209f28b21500226bb9ca7e1c72a45c
- SSDEEP 12288:YuxTQylN+B2gYd1Z7C1a+wY65z3r6w3NN/WxDunTS4uRvOUQ:YuxTQyvQ3Yd1Z7C1aq65zb0DAuRv9Q
- TLSH
  T122E48D87B38ABCE6C602813989DBC3657338B1E153179F57192426357E03EE1EE8761B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  scrcpy-win64-v3.3.4/swresample-5.dll
- Size 120KB
- SHA256 2bb412fe52ea8db1a23f363e28005c184b0ca587c1af2ceb788830737f8bc6d9
- MD5 f337a218595497e1c791a0d63bc728e3
- SHA1 8199dd62359f05ed12bbe97f9287dfb623558b3b
- SHA512 c1468771b5a46fbb605e446a87f7cd215c344ea45d30f802d42aa8fee0ce09b62f1ec853bee22eae1e5ecfa5b8c30856385c6812d6a1943e7f48ba1aeb9f9ded
- SSDEEP 1536:JSZK3sQH/wktGnmiAsE0QDS6odGoVjulqkF6dSoiV6cLoqxM0ReoZ2:JSZK3sQfwktm+F9SFiV6ixVRK
- TLSH
  T1E3C35D56E95369EEC62BE030827B7B22BF61747402682F3949D4C9391C17F40AF5FB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

discoveryexecution

behavioral20

discoveryexecution

behavioral21

discoveryexecution

behavioral22

discoveryexecution

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

© 2018-2026

Terms | Privacy