Overview
overview
7Static
static
3DroidCam.S....2.exe
windows10-2004-x64
6$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3DroidCamApp.exe
windows10-2004-x64
3adb/AdbWinApi.dll
windows10-2004-x64
3adb/AdbWinUsbApi.dll
windows10-2004-x64
3adb/adb.exe
windows10-2004-x64
3lib/DroidC...32.dll
windows10-2004-x64
3lib/insdrv.exe
windows10-2004-x64
3plist.dll
windows10-2004-x64
3usbmuxd.dll
windows10-2004-x64
3vc_redist.x86.exe
windows10-2004-x64
7Analysis
-
max time kernel
1363s -
max time network
1159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
01-08-2024 20:59
Static task
static1
Behavioral task
behavioral1
Sample
DroidCam.Setup.6.5.2.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
DroidCamApp.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral6
Sample
adb/AdbWinApi.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
adb/AdbWinUsbApi.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral8
Sample
adb/adb.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
lib/DroidCamFilter32.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral10
Sample
lib/insdrv.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
plist.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral12
Sample
usbmuxd.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
vc_redist.x86.exe
Resource
win10v2004-20240730-en
General
-
Target
lib/insdrv.exe
-
Size
12KB
-
MD5
b32d29447b5a7a4b8e62f7df5efec272
-
SHA1
4cf32f4a969f62e8c580be3641748b4832397811
-
SHA256
1cd0c2ba5eeaf5519055924f049a4c7feae999126a7c81a16961e486902a1bad
-
SHA512
f26e3e9e9bb3700422843a54a3ef45dcda7073f1af2c36c105f88a6ccead4b4931007341e58f468b4481b676e713c708e3f7aa27360a86599ad7dc01e26b91e6
-
SSDEEP
192:HI4SGHjM9zdjKgOMNhbwi5BlLot6OnTVYy78b55Tl/QJEu7aPHAVIb/K:oVUM9RegOMrbwVtzTNuTKb7aPTu
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
insdrv.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language insdrv.exe