Overview
overview
8Static
static
3DroidCam.S....3.exe
windows10-2004-x64
8DroidCam.S....3.exe
windows11-21h2-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3DroidCamApp.exe
windows10-2004-x64
3DroidCamApp.exe
windows11-21h2-x64
3adb/AdbWinApi.dll
windows10-2004-x64
3adb/AdbWinApi.dll
windows11-21h2-x64
3adb/AdbWinUsbApi.dll
windows10-2004-x64
3adb/AdbWinUsbApi.dll
windows11-21h2-x64
3adb/adb.exe
windows10-2004-x64
3adb/adb.exe
windows11-21h2-x64
3lib/DroidC...32.dll
windows10-2004-x64
3lib/DroidC...32.dll
windows11-21h2-x64
3lib/insdrv.exe
windows10-2004-x64
3lib/insdrv.exe
windows11-21h2-x64
3plist.dll
windows10-2004-x64
3plist.dll
windows11-21h2-x64
3usbmuxd.dll
windows10-2004-x64
3usbmuxd.dll
windows11-21h2-x64
3vc_redist.x86.exe
windows10-2004-x64
4vc_redist.x86.exe
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/05/2026, 01:27
Behavioral task
behavioral1
Sample
DroidCam.Setup.6.5.3.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DroidCam.Setup.6.5.3.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
DroidCamApp.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
DroidCamApp.exe
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
adb/AdbWinApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
adb/AdbWinApi.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
adb/AdbWinUsbApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
adb/AdbWinUsbApi.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
adb/adb.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
adb/adb.exe
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
lib/DroidCamFilter32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
lib/DroidCamFilter32.dll
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
lib/insdrv.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
lib/insdrv.exe
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
plist.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
plist.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
usbmuxd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
usbmuxd.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
vc_redist.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
vc_redist.x86.exe
Resource
win11-20260513-en
General
- Target DroidCamApp.exe
- Size 1.0MB
- Sample260530-bvbvaacx7v
- SHA256 ca9db57a8458f476ecd78eb242ff72d5f17c87f3047bc6fe4802f2e92577533a
- MD5 8f643d9b52d686ec7e7f467d2c4ac1bb
- SHA1 0c79f3ca05024e66dc570f82cc207a6c24798300
- SHA512 5725b52413c0125f86a41431b7e61973a978ac699945cf538ce9893ec750e14994f49c77e4b90359a1a535fe9a5c7eea56d6002f327fa860f98673969723d83d
- SSDEEP 24576:UNDm+YP8ZKK3SO/qnXG9tzr/b5M1FIb3DZxYqyPBKmr:UNDm+I8ZWO/Xf5M4vZ9oBKo
- TLSH T1C335B202725688A2CB8128F9CD15EE6297283E1E57F2CEB771F4791B6530A83FD1416F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DroidCamApp.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4196 DroidCamApp.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4196 DroidCamApp.exe