Analysis

  • user interaction
    yes
  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    16/08/2026, 18:38

General

  • Target
    Install_iCam365_Player_2.3.0.6 (1).exe
  • Size 8.9MB
  • Sample260816-xae7vsvdrc
  • SHA256 83029208b410025f0190cd385737e0414c766109654a7b332d9f4cc758211c8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 15 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Install_iCam365_Player_2.3.0.6 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\Install_iCam365_Player_2.3.0.6 (1).exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:3704
  • C:\Program Files (x86)\iCam365 Player\iCam365.exe
    "C:\Program Files (x86)\iCam365 Player\iCam365.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:452
  • C:\Program Files (x86)\iCam365 Player\iCam365.exe
    "C:\Program Files (x86)\iCam365 Player\iCam365.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3080

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        SDL2.dll

        • Path C:\Program Files (x86)\iCam365 Player\SDL2.dll
        • Size 1.2MB
        • SHA256 f91e1224aed81881483fd066c301562ab095f3549bfcc5dfa7b90c04ef3a6cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.conf

        • Path C:\Program Files (x86)\iCam365 Player\app.conf
        • Size 32B
        • SHA256 d0c800361874d0058a7ff9f7de60c571fa292ffa38a706937d57db533f32e544
        • MD5 SHA1 SHA512

        app.ico

        • Path C:\Program Files (x86)\iCam365 Player\app.ico
        • Size 14KB
        • SHA256 9f81a588f8cd1b27818d73db5637f919fffd293506cc807161928cda31fd82ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dbghelp.dll

        • Path C:\Program Files (x86)\iCam365 Player\dbghelp.dll
        • Size 834KB
        • SHA256 b07a12e3ecd5e418a3f99f00c56e7f482f68cade330e7c079dccdffad2e21299
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iCam365.exe

        • Path C:\Program Files (x86)\iCam365 Player\iCam365.exe
        • Size 2.1MB
        • SHA256 a6c0f524435670ef7c328ba8c09c44672c58df829f4464b333a2c4cf6f400bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jicdw.dll

        • Path C:\Program Files (x86)\iCam365 Player\jicdw.dll
        • Size 97KB
        • SHA256 fee25660bcd5cc238449d7abcb8318967d28d53c3c282f2eb26ce7b382e9d955
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Program Files (x86)\iCam365 Player\libcrypto-1_1.dll
        • Size 2.4MB
        • SHA256 49b26d14cf68a370de47f8f3724e46e61bff98aba7dd7b8a7c1f87e83bb44064
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcurl.dll

        • Path C:\Program Files (x86)\iCam365 Player\libcurl.dll
        • Size 385KB
        • SHA256 d462e37bab62f73c90261dd347cc84240953174c90e9736c1c30318fc21fdb45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1.dll

        • Path C:\Program Files (x86)\iCam365 Player\libssl-1_1.dll
        • Size 518KB
        • SHA256 194473a59a69e72655015dc582f1e1db7476b598c07cd94839d500e0c7135265
        • MD5 SHA1 SHA512 SSDEEP TLSH

        webrtc.dll

        • Path C:\Program Files (x86)\iCam365 Player\webrtc.dll
        • Size 12.0MB
        • SHA256 211906811e7c169bf45181758c61da19c454600048362fc4a1909d34455653b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LangDLL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse5C93.tmp\LangDLL.dll
        • Size 5KB
        • SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icam365.log

        • Path C:\Users\Admin\AppData\Roaming\iCam365\icam365.log
        • Size 237B
        • SHA256 393f5e1dd8e0c64c4578044cdd5e48f40bbfcd707302088e1b97d3b838b1f782
        • MD5 SHA1 SHA512 TLSH