Overview

overview

10

Static

static

10

Spy Note 6...pi.dll

windows7-x64

1

Spy Note 6...pi.dll

windows10-2004-x64

1

Spy Note 6...SM.dll

windows7-x64

1

Spy Note 6...SM.dll

windows10-2004-x64

1

Spy Note 6...SL.exe

windows7-x64

1

Spy Note 6...SL.exe

windows10-2004-x64

1

Spy Note 6...ub.apk

android-9-x86

Spy Note 6...ub.apk

android-10-x64

Spy Note 6...ub.apk

android-11-x64

Spy Note 6...va.jar

windows7-x64

1

Spy Note 6...va.jar

windows10-2004-x64

7

Spy Note 6...sS.exe

windows7-x64

1

Spy Note 6...sS.exe

windows10-2004-x64

1

Spy Note 6...in.exe

windows7-x64

1

Spy Note 6...in.exe

windows10-2004-x64

1

Spy Note 6...ed.exe

windows7-x64

1

Spy Note 6...ed.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-02-2024 15:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Spy Note 6.4/SpyNote Cracked.exe

  • Size

    6.1MB

  • MD5

    b4bb4a074169545d22ad0278e66ec96b

  • SHA1

    c386177d35f0959fa55606df1bb6995b46030c61

  • SHA256

    b3ca2f2cc15a16fc390172a9507337dc1f73d3501b46e2c761238171456654ae

  • SHA512

    c0374732df1bdc15fac5229019d2962485d9a221b970690c1d2e6eb0af6401b0c98fc5d9e1584b7896e28c122afb1faa196ae5ba441f234a522c2746c5931998

  • SSDEEP

    98304:Op2AEpDZEXXZlZYZlbHn7CFK5PnOSPz3ZhqARLlJQHagle:OQvdZEXpGbH7CU9OiphhxlJJg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Spy Note 6.4\SpyNote Cracked.exe
    "C:\Users\Admin\AppData\Local\Temp\Spy Note 6.4\SpyNote Cracked.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4856
  • C:\Windows\system32\wbem\WmiApSrv.exe
    C:\Windows\system32\wbem\WmiApSrv.exe
    1⤵
      PID:3956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4856-0-0x000001E116510000-0x000001E116B30000-memory.dmp
      Filesize

      6.1MB

      Download
    • memory/4856-1-0x00007FFEF8FE0000-0x00007FFEF9AA1000-memory.dmp
      Filesize

      10.8MB

      Download
    • memory/4856-2-0x000001E116FC0000-0x000001E11703A000-memory.dmp
      Filesize

      488KB

      Download
    • memory/4856-3-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-4-0x000001E116EE0000-0x000001E116EEC000-memory.dmp
      Filesize

      48KB

      Download
    • memory/4856-6-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-5-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-7-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-8-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-9-0x00007FFEF8FE0000-0x00007FFEF9AA1000-memory.dmp
      Filesize

      10.8MB

      Download
    • memory/4856-10-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-12-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-11-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-13-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-14-0x000001E117050000-0x000001E117060000-memory.dmp
      Filesize

      64KB

      Download
    • memory/4856-15-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-16-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-17-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-18-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-19-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-24-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-25-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-27-0x000001E131280000-0x000001E131429000-memory.dmp
      Filesize

      1.7MB

      Download
    • memory/4856-28-0x00007FFEF8FE0000-0x00007FFEF9AA1000-memory.dmp
      Filesize

      10.8MB

      Download