Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
28/09/2026, 06:32
General
- Target SeekCamMon_v1_0/SeekCamMon.exe
- Size 110KB
- Sample260928-hapc7sytft
- SHA256 490baea36a0bcbbf8a08ffe720856221b854c6cb584d0ac8b58521ca5260a742
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks SCSI registry key(s) 3 TTPs 8 IoCs
SCSI information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\SeekCamMon_v1_0\SeekCamMon.exe"C:\Users\Admin\AppData\Local\Temp\SeekCamMon_v1_0\SeekCamMon.exe"1⤵
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1516-0-0x0000000074F52000-0x0000000074F53000-memory.dmp
memory/1516-1-0x00000000009E0000-0x0000000000A02000-memory.dmp
memory/1516-2-0x0000000005930000-0x0000000005EEA000-memory.dmp
memory/1516-3-0x0000000005410000-0x00000000054A2000-memory.dmp
memory/1516-4-0x00000000054B0000-0x00000000054F6000-memory.dmp
memory/1516-5-0x0000000074F40000-0x00000000756FC000-memory.dmp
memory/1516-6-0x0000000006090000-0x000000000609A000-memory.dmp
memory/1516-7-0x0000000074F40000-0x00000000756FC000-memory.dmp
memory/1516-9-0x000000000AD30000-0x000000000AD3C000-memory.dmp
memory/1516-8-0x000000000ADE0000-0x000000000AEB4000-memory.dmp
memory/1516-10-0x0000000074F52000-0x0000000074F53000-memory.dmp
memory/1516-11-0x0000000074F40000-0x00000000756FC000-memory.dmp
memory/1516-12-0x000000000B4A0000-0x000000000B9CC000-memory.dmp
memory/1516-13-0x0000000074F40000-0x00000000756FC000-memory.dmp
memory/1516-14-0x000000006EEF0000-0x00000000707BE000-memory.dmp