Analysis

  • max time kernel
    154s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-02-2024 15:37

General

  • Target

    Spy Note 6.4/Resources/Imports/Payload/SL.exe

  • Size

    1.5MB

  • MD5

    2eabc8a774c544e9b6e23ba1b83ed783

  • SHA1

    a880005b4f619e004f4d9adcce2a9612112c26b2

  • SHA256

    0080743a4364b8e5d8ec6a19010ee12dc79fcf815f592db639af262420ada0f8

  • SHA512

    ed8cd1ec97e0954715c81c284bbc2751340a7933511862cda65e72be35fdd9d4a8693066f3023025f92b06c845173c2e5da6f4d88a3e97c62c640643dff475a9

  • SSDEEP

    768:1KSAOfhZXvSzjWKDIp93ZZwpZpTQdBHiF7QHsIMd3uDzZuFs+mk:nrfhZXvSzjWb5wz16S7l9eDzZu7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Spy Note 6.4\Resources\Imports\Payload\SL.exe
    "C:\Users\Admin\AppData\Local\Temp\Spy Note 6.4\Resources\Imports\Payload\SL.exe"
    1⤵
      PID:4972

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4972-0-0x0000015A9C5E0000-0x0000015A9C76C000-memory.dmp
      Filesize

      1.5MB

    • memory/4972-1-0x00007FF977A80000-0x00007FF978541000-memory.dmp
      Filesize

      10.8MB

    • memory/4972-2-0x0000015AB6D90000-0x0000015AB6DA0000-memory.dmp
      Filesize

      64KB

    • memory/4972-3-0x0000015AB6D90000-0x0000015AB6DA0000-memory.dmp
      Filesize

      64KB

    • memory/4972-5-0x00007FF977A80000-0x00007FF978541000-memory.dmp
      Filesize

      10.8MB