Overview
overview
7Static
static
3Install_iC...1).exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3SDL2.dll
windows10-2004-x64
3dbghelp.dll
windows10-2004-x64
3iCam365.exe
windows10-2004-x64
3jicdw.dll
windows10-2004-x64
3libcrypto-1_1.dll
windows10-2004-x64
3libcurl.dll
windows10-2004-x64
3libssl-1_1.dll
windows10-2004-x64
3uninstall.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3webrtc.dll
windows10-2004-x64
3Analysis
- max time kernel
118s - max time network
121s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/08/2026, 18:38
Static task
static1
Behavioral task
behavioral1
Sample
Install_iCam365_Player_2.3.0.6 (1).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
SDL2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dbghelp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
iCam365.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
jicdw.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
libcrypto-1_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
libcurl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
libssl-1_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
webrtc.dll
Resource
win10v2004-20260513-en
General
- Target iCam365.exe
- Size 2.1MB
- Sample260816-xae7vsvdrc
- SHA256 a6c0f524435670ef7c328ba8c09c44672c58df829f4464b333a2c4cf6f400bf4
- MD5 82080da63913bfa8b16de24f76c95e11
- SHA1 ebe591f639eb16a2f6ca5d6d5e155192016c03c8
- SHA512 748009d09ac749f66e0acd7ce3e775ce938bf9eac6706facb91569533577c295950b876ef6962bc7bb1a7b188f6c06fd8134db48ead67564e4ed7d3195fcb520
- SSDEEP 49152:eDoBlAkDEtXnlqKDxfhxu4bX5TB7zlo2pf/lf/d7FpwNIiDs9ZAYb6kGb3:eDoBSkDEJlqKDJyG7zlo2pf/lf/aNIiZ
- TLSH T1A7A5AE00FB82C072D59325B5996F57BB95385F30071499D3ABC03F6EAE70AD1AA3934B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language iCam365.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3444 iCam365.exe