36bc30177e29b9a1a440df85c764d0fa6c9e5c7ff6119ff41a05fadee36f0b82

Analysis

max time kernel
156s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2024 13:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SpyNote_v6.4/SpyNote.exe
Size

6.7MB
MD5

d9265f1d01fe8cfde1b241886e834a8c
SHA1

a5f29b1c2a6f981c246976de1ba7e053841aa562
SHA256

53f32f6ed5e1fbd5f5a29f83ab0eebc385f693824544fa4664242c91c7d9f1bf
SHA512

59fc93e2ba15e8c901216dd2108ddfc3f1b7fa954ba0cc903d684aa4a2353b295c7e5c9f8f20e744de743cff436fee5fd0e96ba1f156a0a681a275f20af85e6b
SSDEEP

196608:2dHPY7vsZ+oa4DuuyrMi8VKe+PMfw7k2c4PAVv1sUpr:+vfZ+IaLM9we+P2myds

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs

Processes:

SpyNote.exe

pid	process
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe
3224	SpyNote.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

SpyNote.exe

pid process

3224 SpyNote.exe
3224 SpyNote.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

SpyNote.exe

pid process

3224 SpyNote.exe

C:\Users\Admin\AppData\Local\Temp\SpyNote_v6.4\SpyNote.exe
"C:\Users\Admin\AppData\Local\Temp\SpyNote_v6.4\SpyNote.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1412 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
1⤵
PID:4104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3224-0-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-1-0x00000000FF730000-0x00000000FFB01000-memory.dmp

Filesize
3.8MB

Download
memory/3224-2-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-3-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-4-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-5-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-6-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-7-0x0000000008B60000-0x0000000008BFC000-memory.dmp

Filesize
624KB

Download
memory/3224-9-0x00000000FF730000-0x00000000FFB01000-memory.dmp

Filesize
3.8MB

Download
memory/3224-8-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-10-0x000000000B020000-0x000000000B148000-memory.dmp

Filesize
1.2MB

Download
memory/3224-11-0x000000000B950000-0x000000000BEF4000-memory.dmp

Filesize
5.6MB

Download
memory/3224-12-0x000000000B440000-0x000000000B4D2000-memory.dmp

Filesize
584KB

Download
memory/3224-13-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-14-0x000000000B900000-0x000000000B90A000-memory.dmp

Filesize
40KB

Download
memory/3224-15-0x000000000BF60000-0x000000000BFB6000-memory.dmp

Filesize
344KB

Download
memory/3224-16-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-17-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-18-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-19-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-20-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-21-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-22-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-23-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-24-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-25-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download
memory/3224-26-0x0000000000D90000-0x00000000028A0000-memory.dmp

Filesize
27.1MB

Download