Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/09/2026, 06:32

General

  • Target
    SeekCamMon_v1_0/SeekCamMon.exe
  • Size 110KB
  • Sample260928-hapc7sytft
  • SHA256 490baea36a0bcbbf8a08ffe720856221b854c6cb584d0ac8b58521ca5260a742
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 8 IoCs

    SCSI information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\SeekCamMon_v1_0\SeekCamMon.exe
    "C:\Users\Admin\AppData\Local\Temp\SeekCamMon_v1_0\SeekCamMon.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Checks SCSI registry key(s)
    PID:4436

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4436-0-0x0000000000DB0000-0x0000000000DD2000-memory.dmp

        memory/4436-1-0x0000000005D20000-0x00000000062C4000-memory.dmp

        memory/4436-2-0x0000000005810000-0x00000000058A2000-memory.dmp

        memory/4436-3-0x00000000057C0000-0x0000000005806000-memory.dmp

        memory/4436-4-0x0000000005A70000-0x0000000005A80000-memory.dmp

        memory/4436-5-0x0000000007970000-0x000000000797A000-memory.dmp

        memory/4436-6-0x0000000005A70000-0x0000000005A80000-memory.dmp

        memory/4436-7-0x0000000007F80000-0x0000000008054000-memory.dmp

        memory/4436-8-0x0000000007ED0000-0x0000000007EDC000-memory.dmp

        memory/4436-9-0x000000000A640000-0x000000000AB6C000-memory.dmp

        memory/4436-10-0x0000000005A70000-0x0000000005A80000-memory.dmp

        memory/4436-11-0x000000006F4F0000-0x0000000070DBE000-memory.dmp