spynote | SpyNote5 (Cyber cafe )[.]rar

Resubmissions

28-05-2024 19:52

240528-ylhmssba38 10

28-05-2024 19:47

240528-yhpxpshf61 10

28-05-2024 19:46

240528-yhassahf5v 10

28-05-2024 18:14

240528-wvqzesfg97 10

Sharing

Copy URL

Twitter E-mail

General

Target

SpyNote5 (Cyber cafe ).rar
Size

9.7MB
MD5

69ea765cf1a8982992867d8e470667d6
SHA1

8bd05148ee5c3376c5f48d7be4039906033f6325
SHA256

65a925eea46a44c117435c1e27117dad4f66704c4035c90fc610e657d9eba453
SHA512

f4f8aaf98c37753f458361ad6428b9a9de513c92fa0ffe81cec52cf63881e63e2eccfd0a67213439a68e5657e3f0d39e9129a6af01d1145c28ca0560fd298961
SSDEEP

196608:+2cClgW5PPJV7auem51echdPCgIb+wJM4zK4w2MBTaBr61yFIKzLxgAmOVqk19:+2bLJxa9O1e0PN6HYbTaBr61wJgA9B

Score

10^/10

spynote

Malware Config

Signatures

Spynote family
spynote

Spynote payload 2 IoCs

Processes:

resource	yara_rule
static1/unpack001/SpyNote5.0/Patch/Patch-StaminaMode-release.apk	family_spynote
static1/unpack001/SpyNote5.0/Patch/Patch-release.apk	family_spynote

Declares broadcast receivers with permission to handle system events 1 IoCs

Processes:

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 20 IoCs

Processes:

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/SpyNote5.0/AxInterop.WMPLib.dll
unpack001/SpyNote5.0/Interop.WMPLib.dll
unpack001/SpyNote5.0/SpyNote.exe

Files

SpyNote5 (Cyber cafe ).rar
.rar

Password: tr
SpyNote5.0/App_Resources/Flag/-1.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/ad.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/ae.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/af.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/ag.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/ai.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/al.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/am.png
.png

Password: tr
SpyNote5.0/App_Resources/Flag/an.png
.png
SpyNote5.0/App_Resources/Flag/ao.png
.png
SpyNote5.0/App_Resources/Flag/ar.png
.png
SpyNote5.0/App_Resources/Flag/as.png
.png
SpyNote5.0/App_Resources/Flag/at.png
.png
SpyNote5.0/App_Resources/Flag/au.png
.png
SpyNote5.0/App_Resources/Flag/aw.png
.png
SpyNote5.0/App_Resources/Flag/ax.png
.png
SpyNote5.0/App_Resources/Flag/az.png
.png
SpyNote5.0/App_Resources/Flag/ba.png
.png
SpyNote5.0/App_Resources/Flag/bb.png
.png
SpyNote5.0/App_Resources/Flag/bd.png
.png
SpyNote5.0/App_Resources/Flag/be.png
.png
SpyNote5.0/App_Resources/Flag/bf.png
.png
SpyNote5.0/App_Resources/Flag/bg.png
.png
SpyNote5.0/App_Resources/Flag/bh.png
.png
SpyNote5.0/App_Resources/Flag/bi.png
.png
SpyNote5.0/App_Resources/Flag/bj.png
.png
SpyNote5.0/App_Resources/Flag/bm.png
.png
SpyNote5.0/App_Resources/Flag/bn.png
.png
SpyNote5.0/App_Resources/Flag/bo.png
.png
SpyNote5.0/App_Resources/Flag/br.png
.png
SpyNote5.0/App_Resources/Flag/bs.png
.png
SpyNote5.0/App_Resources/Flag/bt.png
.png
SpyNote5.0/App_Resources/Flag/bv.png
.png
SpyNote5.0/App_Resources/Flag/bw.png
.png
SpyNote5.0/App_Resources/Flag/by.png
.png
SpyNote5.0/App_Resources/Flag/bz.png
.png
SpyNote5.0/App_Resources/Flag/ca.png
.png
SpyNote5.0/App_Resources/Flag/catalonia.png
.png
SpyNote5.0/App_Resources/Flag/cc.png
.png
SpyNote5.0/App_Resources/Flag/cd.png
.png
SpyNote5.0/App_Resources/Flag/cf.png
.png
SpyNote5.0/App_Resources/Flag/cg.png
.png
SpyNote5.0/App_Resources/Flag/ch.png
.png
SpyNote5.0/App_Resources/Flag/ci.png
.png
SpyNote5.0/App_Resources/Flag/ck.png
.png
SpyNote5.0/App_Resources/Flag/cl.png
.png
SpyNote5.0/App_Resources/Flag/cm.png
.png
SpyNote5.0/App_Resources/Flag/cn.png
.png
SpyNote5.0/App_Resources/Flag/co.png
.png
SpyNote5.0/App_Resources/Flag/cr.png
.png
SpyNote5.0/App_Resources/Flag/cs.png
.png
SpyNote5.0/App_Resources/Flag/cu.png
.png
SpyNote5.0/App_Resources/Flag/cv.png
.png
SpyNote5.0/App_Resources/Flag/cx.png
.png
SpyNote5.0/App_Resources/Flag/cy.png
.png
SpyNote5.0/App_Resources/Flag/cz.png
.png
SpyNote5.0/App_Resources/Flag/de.png
.png
SpyNote5.0/App_Resources/Flag/dj.png
.png
SpyNote5.0/App_Resources/Flag/dk.png
.png
SpyNote5.0/App_Resources/Flag/dm.png
.png
SpyNote5.0/App_Resources/Flag/do.png
.png
SpyNote5.0/App_Resources/Flag/dz.png
.png
SpyNote5.0/App_Resources/Flag/ec.png
.png
SpyNote5.0/App_Resources/Flag/ee.png
.png
SpyNote5.0/App_Resources/Flag/eg.png
.png
SpyNote5.0/App_Resources/Flag/eh.png
.png
SpyNote5.0/App_Resources/Flag/england.png
.png
SpyNote5.0/App_Resources/Flag/er.png
.png
SpyNote5.0/App_Resources/Flag/es.png
.png
SpyNote5.0/App_Resources/Flag/et.png
.png
SpyNote5.0/App_Resources/Flag/europeanunion.png
.png
SpyNote5.0/App_Resources/Flag/fam.png
.png
SpyNote5.0/App_Resources/Flag/fi.png
.png
SpyNote5.0/App_Resources/Flag/fj.png
.png
SpyNote5.0/App_Resources/Flag/fk.png
.png
SpyNote5.0/App_Resources/Flag/fm.png
.png
SpyNote5.0/App_Resources/Flag/fo.png
.png
SpyNote5.0/App_Resources/Flag/fr.png
.png
SpyNote5.0/App_Resources/Flag/ga.png
.png
SpyNote5.0/App_Resources/Flag/gb.png
.png
SpyNote5.0/App_Resources/Flag/gd.png
.png
SpyNote5.0/App_Resources/Flag/ge.png
.png
SpyNote5.0/App_Resources/Flag/gf.png
.png
SpyNote5.0/App_Resources/Flag/gh.png
.png
SpyNote5.0/App_Resources/Flag/gi.png
.png
SpyNote5.0/App_Resources/Flag/gl.png
.png
SpyNote5.0/App_Resources/Flag/gm.png
.png
SpyNote5.0/App_Resources/Flag/gn.png
.png
SpyNote5.0/App_Resources/Flag/gp.png
.png
SpyNote5.0/App_Resources/Flag/gq.png
.png
SpyNote5.0/App_Resources/Flag/gr.png
.png
SpyNote5.0/App_Resources/Flag/gs.png
.png
SpyNote5.0/App_Resources/Flag/gt.png
.png
SpyNote5.0/App_Resources/Flag/gu.png
.png
SpyNote5.0/App_Resources/Flag/gw.png
.png
SpyNote5.0/App_Resources/Flag/gy.png
.png
SpyNote5.0/App_Resources/Flag/hk.png
.png
SpyNote5.0/App_Resources/Flag/hm.png
.png
SpyNote5.0/App_Resources/Flag/hn.png
.png
SpyNote5.0/App_Resources/Flag/hr.png
.png
SpyNote5.0/App_Resources/Flag/ht.png
.png
SpyNote5.0/App_Resources/Flag/hu.png
.png
SpyNote5.0/App_Resources/Flag/id.png
.png
SpyNote5.0/App_Resources/Flag/ie.png
.png
SpyNote5.0/App_Resources/Flag/il.png
.png
SpyNote5.0/App_Resources/Flag/in.png
.png
SpyNote5.0/App_Resources/Flag/io.png
.png
SpyNote5.0/App_Resources/Flag/iq.png
.png
SpyNote5.0/App_Resources/Flag/ir.png
.png
SpyNote5.0/App_Resources/Flag/is.png
.png
SpyNote5.0/App_Resources/Flag/it.png
.png
SpyNote5.0/App_Resources/Flag/jm.png
.png
SpyNote5.0/App_Resources/Flag/jo.png
.png
SpyNote5.0/App_Resources/Flag/jp.png
.png
SpyNote5.0/App_Resources/Flag/ke.png
.png
SpyNote5.0/App_Resources/Flag/kg.png
.png
SpyNote5.0/App_Resources/Flag/kh.png
.png
SpyNote5.0/App_Resources/Flag/ki.png
.png
SpyNote5.0/App_Resources/Flag/km.png
.png
SpyNote5.0/App_Resources/Flag/kn.png
.png
SpyNote5.0/App_Resources/Flag/kp.png
.png
SpyNote5.0/App_Resources/Flag/kr.png
.png
SpyNote5.0/App_Resources/Flag/kw.png
.png
SpyNote5.0/App_Resources/Flag/ky.png
.png
SpyNote5.0/App_Resources/Flag/kz.png
.png
SpyNote5.0/App_Resources/Flag/la.png
.png
SpyNote5.0/App_Resources/Flag/lb.png
.png
SpyNote5.0/App_Resources/Flag/lc.png
.png
SpyNote5.0/App_Resources/Flag/li.png
.png
SpyNote5.0/App_Resources/Flag/lk.png
.png
SpyNote5.0/App_Resources/Flag/lr.png
.png
SpyNote5.0/App_Resources/Flag/ls.png
.png
SpyNote5.0/App_Resources/Flag/lt.png
.png
SpyNote5.0/App_Resources/Flag/lu.png
.png
SpyNote5.0/App_Resources/Flag/lv.png
.png
SpyNote5.0/App_Resources/Flag/ly.png
.png
SpyNote5.0/App_Resources/Flag/ma.png
.png
SpyNote5.0/App_Resources/Flag/mc.png
.png
SpyNote5.0/App_Resources/Flag/md.png
.png
SpyNote5.0/App_Resources/Flag/me.png
.png
SpyNote5.0/App_Resources/Flag/mg.png
.png
SpyNote5.0/App_Resources/Flag/mh.png
.png
SpyNote5.0/App_Resources/Flag/mk.png
.png
SpyNote5.0/App_Resources/Flag/ml.png
.png
SpyNote5.0/App_Resources/Flag/mm.png
.png
SpyNote5.0/App_Resources/Flag/mn.png
.png
SpyNote5.0/App_Resources/Flag/mo.png
.png
SpyNote5.0/App_Resources/Flag/mp.png
.png
SpyNote5.0/App_Resources/Flag/mq.png
.png
SpyNote5.0/App_Resources/Flag/mr.png
.png
SpyNote5.0/App_Resources/Flag/ms.png
.png
SpyNote5.0/App_Resources/Flag/mt.png
.png
SpyNote5.0/App_Resources/Flag/mu.png
.png
SpyNote5.0/App_Resources/Flag/mv.png
.png
SpyNote5.0/App_Resources/Flag/mw.png
.png
SpyNote5.0/App_Resources/Flag/mx.png
.png
SpyNote5.0/App_Resources/Flag/my.png
.png
SpyNote5.0/App_Resources/Flag/mz.png
.png
SpyNote5.0/App_Resources/Flag/na.png
.png
SpyNote5.0/App_Resources/Flag/nc.png
.png
SpyNote5.0/App_Resources/Flag/ne.png
.png
SpyNote5.0/App_Resources/Flag/nf.png
.png
SpyNote5.0/App_Resources/Flag/ng.png
.png
SpyNote5.0/App_Resources/Flag/ni.png
.png
SpyNote5.0/App_Resources/Flag/nl.png
.png
SpyNote5.0/App_Resources/Flag/no.png
.png
SpyNote5.0/App_Resources/Flag/np.png
.png
SpyNote5.0/App_Resources/Flag/nr.png
.png
SpyNote5.0/App_Resources/Flag/nu.png
.png
SpyNote5.0/App_Resources/Flag/nz.png
.png
SpyNote5.0/App_Resources/Flag/om.png
.png
SpyNote5.0/App_Resources/Flag/pa.png
.png
SpyNote5.0/App_Resources/Flag/pe.png
.png
SpyNote5.0/App_Resources/Flag/pf.png
.png
SpyNote5.0/App_Resources/Flag/pg.png
.png
SpyNote5.0/App_Resources/Flag/ph.png
.png
SpyNote5.0/App_Resources/Flag/pk.png
.png
SpyNote5.0/App_Resources/Flag/pl.png
.png
SpyNote5.0/App_Resources/Flag/pm.png
.png
SpyNote5.0/App_Resources/Flag/pn.png
.png
SpyNote5.0/App_Resources/Flag/pr.png
.png
SpyNote5.0/App_Resources/Flag/ps.png
.png
SpyNote5.0/App_Resources/Flag/pt.png
.png
SpyNote5.0/App_Resources/Flag/pw.png
.png
SpyNote5.0/App_Resources/Flag/py.png
.png
SpyNote5.0/App_Resources/Flag/qa.png
.png
SpyNote5.0/App_Resources/Flag/re.png
.png
SpyNote5.0/App_Resources/Flag/ro.png
.png
SpyNote5.0/App_Resources/Flag/rs.png
.png
SpyNote5.0/App_Resources/Flag/ru.png
.png
SpyNote5.0/App_Resources/Flag/rw.png
.png
SpyNote5.0/App_Resources/Flag/sa.png
.png
SpyNote5.0/App_Resources/Flag/sb.png
.png
SpyNote5.0/App_Resources/Flag/sc.png
.png
SpyNote5.0/App_Resources/Flag/scotland.png
.png
SpyNote5.0/App_Resources/Flag/sd.png
.png
SpyNote5.0/App_Resources/Flag/se.png
.png
SpyNote5.0/App_Resources/Flag/sg.png
.png
SpyNote5.0/App_Resources/Flag/sh.png
.png
SpyNote5.0/App_Resources/Flag/si.png
.png
SpyNote5.0/App_Resources/Flag/sj.png
.png
SpyNote5.0/App_Resources/Flag/sk.png
.png
SpyNote5.0/App_Resources/Flag/sl.png
.png
SpyNote5.0/App_Resources/Flag/sm.png
.png
SpyNote5.0/App_Resources/Flag/sn.png
.png
SpyNote5.0/App_Resources/Flag/so.png
.png
SpyNote5.0/App_Resources/Flag/sr.png
.png
SpyNote5.0/App_Resources/Flag/st.png
.png
SpyNote5.0/App_Resources/Flag/sv.png
.png
SpyNote5.0/App_Resources/Flag/sy.png
.png
SpyNote5.0/App_Resources/Flag/sz.png
.png
SpyNote5.0/App_Resources/Flag/tc.png
.png
SpyNote5.0/App_Resources/Flag/td.png
.png
SpyNote5.0/App_Resources/Flag/tf.png
.png
SpyNote5.0/App_Resources/Flag/tg.png
.png
SpyNote5.0/App_Resources/Flag/th.png
.png
SpyNote5.0/App_Resources/Flag/tj.png
.png
SpyNote5.0/App_Resources/Flag/tk.png
.png
SpyNote5.0/App_Resources/Flag/tl.png
.png
SpyNote5.0/App_Resources/Flag/tm.png
.png
SpyNote5.0/App_Resources/Flag/tn.png
.png
SpyNote5.0/App_Resources/Flag/to.png
.png
SpyNote5.0/App_Resources/Flag/tr.png
.png
SpyNote5.0/App_Resources/Flag/tt.png
.png
SpyNote5.0/App_Resources/Flag/tv.png
.png
SpyNote5.0/App_Resources/Flag/tw.png
.png
SpyNote5.0/App_Resources/Flag/tz.png
.png
SpyNote5.0/App_Resources/Flag/ua.png
.png
SpyNote5.0/App_Resources/Flag/ug.png
.png
SpyNote5.0/App_Resources/Flag/um.png
.png
SpyNote5.0/App_Resources/Flag/us.png
.png
SpyNote5.0/App_Resources/Flag/uy.png
.png
SpyNote5.0/App_Resources/Flag/uz.png
.png
SpyNote5.0/App_Resources/Flag/va.png
.png
SpyNote5.0/App_Resources/Flag/vc.png
.png
SpyNote5.0/App_Resources/Flag/ve.png
.png
SpyNote5.0/App_Resources/Flag/vg.png
.png
SpyNote5.0/App_Resources/Flag/vi.png
.png
SpyNote5.0/App_Resources/Flag/vn.png
.png
SpyNote5.0/App_Resources/Flag/vu.png
.png
SpyNote5.0/App_Resources/Flag/wales.png
.png
SpyNote5.0/App_Resources/Flag/wf.png
.png
SpyNote5.0/App_Resources/Flag/ws.png
.png
SpyNote5.0/App_Resources/Flag/ye.png
.png
SpyNote5.0/App_Resources/Flag/yt.png
.png
SpyNote5.0/App_Resources/Flag/za.png
.png
SpyNote5.0/App_Resources/Flag/zm.png
.png
SpyNote5.0/App_Resources/Flag/zw.png
.png
SpyNote5.0/App_Resources/Flag16.rar
.rar
SpyNote5.0/App_Resources/Flag32.rar
.rar
SpyNote5.0/App_Resources/OBU.inf
SpyNote5.0/App_Resources/Terminal.inf
SpyNote5.0/App_Resources/apktool/apktool.zip
.zip
SpyNote5.0/App_Resources/icons/about/img_0.psd
.png
SpyNote5.0/App_Resources/icons/account_manager/account.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.android.email.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.bbm.account.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.bbm.contacts.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.dropbox.android.account.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.facebook.auth.login.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.facebook.messenger.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.google.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.sec.android.app.sns3.twitter.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.skype.contacts.sync.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.twitter.android.auth.login.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.whatsapp.png
.png
SpyNote5.0/App_Resources/icons/account_manager/instagram.png
.png
SpyNote5.0/App_Resources/icons/account_manager/org.telegram.messenger.png
.png
SpyNote5.0/App_Resources/icons/account_manager/org.telegram.plus.png
.png
SpyNote5.0/App_Resources/icons/account_manager/snapchat.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/-1.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/Incoming.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/Missed.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/Outgoing.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/com.google.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/com.skype.contacts.sync.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/com.whatsapp.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/facebook-box.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/instagram.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/phone.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/sim.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/snapchat.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/acc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ad.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/b.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/c.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ca.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/cat.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ch.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/clo.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/cp.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/d.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/del.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/dn.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ed.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/eff.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/f.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/flash.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/foc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/inf.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/k.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/loc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ma.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/mc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/op_app.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/oppf.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/pack.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/pas.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ph.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/play.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/play_s.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/prg.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/re.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ren.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/s.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/sce.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/set.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/setw.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/stop_s.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/t.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/u.png
.png
SpyNote5.0/App_Resources/icons/file_manager/-1.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.3gp.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.aac.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.avi.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.bmp.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.css.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.doc.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.flac.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.flv.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.gif.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.htm.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.html.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.imy.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.jpg.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.js.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.m4a.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mid.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mkv.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mov.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mp3.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mp4.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mxmf.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.ogg.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.ota.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.pdf.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.php.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.png.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.rar.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.rtttl.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.rtx.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.ts.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.txt.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.wav.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.webp.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.wmv.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.xmf.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.xml.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.zip.png
.png
SpyNote5.0/App_Resources/icons/file_manager/Folder Files.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/Rotate180.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/chevron-left.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/chevron_right.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/dow.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/errors.ico
SpyNote5.0/App_Resources/icons/icon_diverse/ico_chat.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/ico_chat2.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/icon_default.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/li_arr.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/ri_arr.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/up.png
.png
SpyNote5.0/App_Resources/icons/icon_window/ic_Server.ico
SpyNote5.0/App_Resources/icons/icon_window/ic_ServerErr.ico
SpyNote5.0/App_Resources/icons/location_manager/location.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/bluetooth.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/gps.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/mobile_data.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/normal.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/silent.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/vibrate.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/wifi_connected.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/wifi_disconnected.png
.png
SpyNote5.0/App_Resources/icons/phone_info/-1.png
.png
SpyNote5.0/App_Resources/icons/phone_info/battery.png
.png
SpyNote5.0/App_Resources/icons/phone_info/device.png
.png
SpyNote5.0/App_Resources/icons/phone_info/sim.png
.png
SpyNote5.0/App_Resources/icons/phone_info/system.png
.png
SpyNote5.0/App_Resources/icons/phone_info/wifi.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/Key&ScreenOff.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/Key&ScreenOn.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/ScreenOff.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/ScreenOn.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/null.png
.png
SpyNote5.0/App_Resources/icons/sms_manager/sms.png
.png
SpyNote5.0/App_Resources/icons/sms_manager/smsopen.png
.png
SpyNote5.0/App_Resources/icons/wp/null.png
.png
SpyNote5.0/AxInterop.WMPLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote5.0/Interop.WMPLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote5.0/Patch/Patch-StaminaMode-release.apk
.apk android

com.eset.ems2.gp

yps.eton.application.M

Activities

yps.eton.application.M

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALL_LOG
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INSTALL_PACKAGES
android.permission.PROCESS_OUTGOING_CALLS

Receivers

yps.eton.application.B

android.intent.action.BOOT_COMPLETED

yps.eton.application.C

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

yps.eton.application.S

android.provider.Telephony.SMS_RECEIVED

yps.eton.application.D

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

Services

yps.eton.application.k

android.accessibilityservice.AccessibilityService
SpyNote5.0/Patch/Patch-release.apk
.apk android

yps.eton.application

yps.eton.application.M

Activities

yps.eton.application.M

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALL_LOG
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INSTALL_PACKAGES
android.permission.PROCESS_OUTGOING_CALLS

Receivers

yps.eton.application.B

android.intent.action.BOOT_COMPLETED

yps.eton.application.C

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

yps.eton.application.S

android.provider.Telephony.SMS_RECEIVED

yps.eton.application.D

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

Services

yps.eton.application.k

android.accessibilityservice.AccessibilityService
SpyNote5.0/SpyNote.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\scream\Desktop\WindowsApplication1\WindowsApplication1\WindowsApplication1\obj\Debug\SpyNote.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: tr

Password: tr

Password: tr

Password: tr

Password: tr

Password: tr

Password: tr

Password: tr

Password: tr

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 50KB - Virtual size: 50KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 321KB - Virtual size: 321KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 512B - Virtual size: 12B

com.eset.ems2.gp

yps.eton.application.M

Activities

yps.eton.application.M

Permissions

Receivers

yps.eton.application.B

yps.eton.application.C

yps.eton.application.S

yps.eton.application.D

Services

yps.eton.application.k

yps.eton.application

yps.eton.application.M

Activities

yps.eton.application.M

Permissions

Receivers

yps.eton.application.B

yps.eton.application.C

yps.eton.application.S

yps.eton.application.D

Services

yps.eton.application.k

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 362KB - Virtual size: 362KB

.rsrc Size: 363KB - Virtual size: 363KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 50KB - Virtual size: 50KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 321KB - Virtual size: 321KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 362KB - Virtual size: 362KB

.rsrc
Size: 363KB - Virtual size: 363KB

.reloc
Size: 512B - Virtual size: 12B