Analysis

  • max time kernel
    92s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-02-2024 15:23

General

  • Target

    Spy Note 6.4/Resources/Imports/Payload/SL.exe

  • Size

    1.5MB

  • MD5

    2eabc8a774c544e9b6e23ba1b83ed783

  • SHA1

    a880005b4f619e004f4d9adcce2a9612112c26b2

  • SHA256

    0080743a4364b8e5d8ec6a19010ee12dc79fcf815f592db639af262420ada0f8

  • SHA512

    ed8cd1ec97e0954715c81c284bbc2751340a7933511862cda65e72be35fdd9d4a8693066f3023025f92b06c845173c2e5da6f4d88a3e97c62c640643dff475a9

  • SSDEEP

    768:1KSAOfhZXvSzjWKDIp93ZZwpZpTQdBHiF7QHsIMd3uDzZuFs+mk:nrfhZXvSzjWb5wz16S7l9eDzZu7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Spy Note 6.4\Resources\Imports\Payload\SL.exe
    "C:\Users\Admin\AppData\Local\Temp\Spy Note 6.4\Resources\Imports\Payload\SL.exe"
    1⤵
      PID:4084

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4084-0-0x0000026F7C850000-0x0000026F7C9DC000-memory.dmp
      Filesize

      1.5MB

    • memory/4084-1-0x00007FFCA0900000-0x00007FFCA13C1000-memory.dmp
      Filesize

      10.8MB

    • memory/4084-2-0x0000026F7EE60000-0x0000026F7EE70000-memory.dmp
      Filesize

      64KB

    • memory/4084-4-0x0000026F7F240000-0x0000026F7F3E9000-memory.dmp
      Filesize

      1.7MB

    • memory/4084-5-0x00007FFCA0900000-0x00007FFCA13C1000-memory.dmp
      Filesize

      10.8MB