spynote | SpyNote5[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

SpyNote5.0.zip
Size

9.8MB
MD5

68cdc4dbfb199b39a135031da05cfb27
SHA1

6e1ab833ed942e202af370680ba4f4ad84073006
SHA256

077b4fd180fb6b348d58d0a36a5ecd170e381b67b3d36cf41f1d2a64a59f2de1
SHA512

b4c6f45a28a9965f20be6ed25c1d593e588c3fcc6e66dd8db94e6fbd0fd73f95f2c2bb5bbcd70149fbc78b327020ab02f3518f9c64e993379d671bf871116435
SSDEEP

196608:2X2NKT8mqfp+Tt9gfE4Q2SbqSlsNkEqj64lLPRA3gTHlc+vYviuvkLj4zeMCerJ:YF85p+xwEsHSqqjp2QjTATvkvyDr

Score

10^/10

spynote

Malware Config

Signatures

Spynote family
spynote

Spynote payload 2 IoCs

resource	yara_rule
static1/unpack001/SpyNote5.0/Patch/Patch-StaminaMode-release.apk	family_spynote
static1/unpack001/SpyNote5.0/Patch/Patch-release.apk	family_spynote

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 20 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SpyNote5.0/AxInterop.WMPLib.dll
unpack001/SpyNote5.0/Interop.WMPLib.dll
unpack001/SpyNote5.0/SpyNote.exe

Files

SpyNote5.0.zip
.zip

Password: infected
SpyNote5.0/App_Resources/Flag/-1.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/ad.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/ae.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/af.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/ag.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/ai.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/al.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/am.png
.png

Password: infected
SpyNote5.0/App_Resources/Flag/an.png
.png
SpyNote5.0/App_Resources/Flag/ao.png
.png
SpyNote5.0/App_Resources/Flag/ar.png
.png
SpyNote5.0/App_Resources/Flag/as.png
.png
SpyNote5.0/App_Resources/Flag/at.png
.png
SpyNote5.0/App_Resources/Flag/au.png
.png
SpyNote5.0/App_Resources/Flag/aw.png
.png
SpyNote5.0/App_Resources/Flag/ax.png
.png
SpyNote5.0/App_Resources/Flag/az.png
.png
SpyNote5.0/App_Resources/Flag/ba.png
.png
SpyNote5.0/App_Resources/Flag/bb.png
.png
SpyNote5.0/App_Resources/Flag/bd.png
.png
SpyNote5.0/App_Resources/Flag/be.png
.png
SpyNote5.0/App_Resources/Flag/bf.png
.png
SpyNote5.0/App_Resources/Flag/bg.png
.png
SpyNote5.0/App_Resources/Flag/bh.png
.png
SpyNote5.0/App_Resources/Flag/bi.png
.png
SpyNote5.0/App_Resources/Flag/bj.png
.png
SpyNote5.0/App_Resources/Flag/bm.png
.png
SpyNote5.0/App_Resources/Flag/bn.png
.png
SpyNote5.0/App_Resources/Flag/bo.png
.png
SpyNote5.0/App_Resources/Flag/br.png
.png
SpyNote5.0/App_Resources/Flag/bs.png
.png
SpyNote5.0/App_Resources/Flag/bt.png
.png
SpyNote5.0/App_Resources/Flag/bv.png
.png
SpyNote5.0/App_Resources/Flag/bw.png
.png
SpyNote5.0/App_Resources/Flag/by.png
.png
SpyNote5.0/App_Resources/Flag/bz.png
.png
SpyNote5.0/App_Resources/Flag/ca.png
.png
SpyNote5.0/App_Resources/Flag/catalonia.png
.png
SpyNote5.0/App_Resources/Flag/cc.png
.png
SpyNote5.0/App_Resources/Flag/cd.png
.png
SpyNote5.0/App_Resources/Flag/cf.png
.png
SpyNote5.0/App_Resources/Flag/cg.png
.png
SpyNote5.0/App_Resources/Flag/ch.png
.png
SpyNote5.0/App_Resources/Flag/ci.png
.png
SpyNote5.0/App_Resources/Flag/ck.png
.png
SpyNote5.0/App_Resources/Flag/cl.png
.png
SpyNote5.0/App_Resources/Flag/cm.png
.png
SpyNote5.0/App_Resources/Flag/cn.png
.png
SpyNote5.0/App_Resources/Flag/co.png
.png
SpyNote5.0/App_Resources/Flag/cr.png
.png
SpyNote5.0/App_Resources/Flag/cs.png
.png
SpyNote5.0/App_Resources/Flag/cu.png
.png
SpyNote5.0/App_Resources/Flag/cv.png
.png
SpyNote5.0/App_Resources/Flag/cx.png
.png
SpyNote5.0/App_Resources/Flag/cy.png
.png
SpyNote5.0/App_Resources/Flag/cz.png
.png
SpyNote5.0/App_Resources/Flag/de.png
.png
SpyNote5.0/App_Resources/Flag/dj.png
.png
SpyNote5.0/App_Resources/Flag/dk.png
.png
SpyNote5.0/App_Resources/Flag/dm.png
.png
SpyNote5.0/App_Resources/Flag/do.png
.png
SpyNote5.0/App_Resources/Flag/dz.png
.png
SpyNote5.0/App_Resources/Flag/ec.png
.png
SpyNote5.0/App_Resources/Flag/ee.png
.png
SpyNote5.0/App_Resources/Flag/eg.png
.png
SpyNote5.0/App_Resources/Flag/eh.png
.png
SpyNote5.0/App_Resources/Flag/england.png
.png
SpyNote5.0/App_Resources/Flag/er.png
.png
SpyNote5.0/App_Resources/Flag/es.png
.png
SpyNote5.0/App_Resources/Flag/et.png
.png
SpyNote5.0/App_Resources/Flag/europeanunion.png
.png
SpyNote5.0/App_Resources/Flag/fam.png
.png
SpyNote5.0/App_Resources/Flag/fi.png
.png
SpyNote5.0/App_Resources/Flag/fj.png
.png
SpyNote5.0/App_Resources/Flag/fk.png
.png
SpyNote5.0/App_Resources/Flag/fm.png
.png
SpyNote5.0/App_Resources/Flag/fo.png
.png
SpyNote5.0/App_Resources/Flag/fr.png
.png
SpyNote5.0/App_Resources/Flag/ga.png
.png
SpyNote5.0/App_Resources/Flag/gb.png
.png
SpyNote5.0/App_Resources/Flag/gd.png
.png
SpyNote5.0/App_Resources/Flag/ge.png
.png
SpyNote5.0/App_Resources/Flag/gf.png
.png
SpyNote5.0/App_Resources/Flag/gh.png
.png
SpyNote5.0/App_Resources/Flag/gi.png
.png
SpyNote5.0/App_Resources/Flag/gl.png
.png
SpyNote5.0/App_Resources/Flag/gm.png
.png
SpyNote5.0/App_Resources/Flag/gn.png
.png
SpyNote5.0/App_Resources/Flag/gp.png
.png
SpyNote5.0/App_Resources/Flag/gq.png
.png
SpyNote5.0/App_Resources/Flag/gr.png
.png
SpyNote5.0/App_Resources/Flag/gs.png
.png
SpyNote5.0/App_Resources/Flag/gt.png
.png
SpyNote5.0/App_Resources/Flag/gu.png
.png
SpyNote5.0/App_Resources/Flag/gw.png
.png
SpyNote5.0/App_Resources/Flag/gy.png
.png
SpyNote5.0/App_Resources/Flag/hk.png
.png
SpyNote5.0/App_Resources/Flag/hm.png
.png
SpyNote5.0/App_Resources/Flag/hn.png
.png
SpyNote5.0/App_Resources/Flag/hr.png
.png
SpyNote5.0/App_Resources/Flag/ht.png
.png
SpyNote5.0/App_Resources/Flag/hu.png
.png
SpyNote5.0/App_Resources/Flag/id.png
.png
SpyNote5.0/App_Resources/Flag/ie.png
.png
SpyNote5.0/App_Resources/Flag/il.png
.png
SpyNote5.0/App_Resources/Flag/in.png
.png
SpyNote5.0/App_Resources/Flag/io.png
.png
SpyNote5.0/App_Resources/Flag/iq.png
.png
SpyNote5.0/App_Resources/Flag/ir.png
.png
SpyNote5.0/App_Resources/Flag/is.png
.png
SpyNote5.0/App_Resources/Flag/it.png
.png
SpyNote5.0/App_Resources/Flag/jm.png
.png
SpyNote5.0/App_Resources/Flag/jo.png
.png
SpyNote5.0/App_Resources/Flag/jp.png
.png
SpyNote5.0/App_Resources/Flag/ke.png
.png
SpyNote5.0/App_Resources/Flag/kg.png
.png
SpyNote5.0/App_Resources/Flag/kh.png
.png
SpyNote5.0/App_Resources/Flag/ki.png
.png
SpyNote5.0/App_Resources/Flag/km.png
.png
SpyNote5.0/App_Resources/Flag/kn.png
.png
SpyNote5.0/App_Resources/Flag/kp.png
.png
SpyNote5.0/App_Resources/Flag/kr.png
.png
SpyNote5.0/App_Resources/Flag/kw.png
.png
SpyNote5.0/App_Resources/Flag/ky.png
.png
SpyNote5.0/App_Resources/Flag/kz.png
.png
SpyNote5.0/App_Resources/Flag/la.png
.png
SpyNote5.0/App_Resources/Flag/lb.png
.png
SpyNote5.0/App_Resources/Flag/lc.png
.png
SpyNote5.0/App_Resources/Flag/li.png
.png
SpyNote5.0/App_Resources/Flag/lk.png
.png
SpyNote5.0/App_Resources/Flag/lr.png
.png
SpyNote5.0/App_Resources/Flag/ls.png
.png
SpyNote5.0/App_Resources/Flag/lt.png
.png
SpyNote5.0/App_Resources/Flag/lu.png
.png
SpyNote5.0/App_Resources/Flag/lv.png
.png
SpyNote5.0/App_Resources/Flag/ly.png
.png
SpyNote5.0/App_Resources/Flag/ma.png
.png
SpyNote5.0/App_Resources/Flag/mc.png
.png
SpyNote5.0/App_Resources/Flag/md.png
.png
SpyNote5.0/App_Resources/Flag/me.png
.png
SpyNote5.0/App_Resources/Flag/mg.png
.png
SpyNote5.0/App_Resources/Flag/mh.png
.png
SpyNote5.0/App_Resources/Flag/mk.png
.png
SpyNote5.0/App_Resources/Flag/ml.png
.png
SpyNote5.0/App_Resources/Flag/mm.png
.png
SpyNote5.0/App_Resources/Flag/mn.png
.png
SpyNote5.0/App_Resources/Flag/mo.png
.png
SpyNote5.0/App_Resources/Flag/mp.png
.png
SpyNote5.0/App_Resources/Flag/mq.png
.png
SpyNote5.0/App_Resources/Flag/mr.png
.png
SpyNote5.0/App_Resources/Flag/ms.png
.png
SpyNote5.0/App_Resources/Flag/mt.png
.png
SpyNote5.0/App_Resources/Flag/mu.png
.png
SpyNote5.0/App_Resources/Flag/mv.png
.png
SpyNote5.0/App_Resources/Flag/mw.png
.png
SpyNote5.0/App_Resources/Flag/mx.png
.png
SpyNote5.0/App_Resources/Flag/my.png
.png
SpyNote5.0/App_Resources/Flag/mz.png
.png
SpyNote5.0/App_Resources/Flag/na.png
.png
SpyNote5.0/App_Resources/Flag/nc.png
.png
SpyNote5.0/App_Resources/Flag/ne.png
.png
SpyNote5.0/App_Resources/Flag/nf.png
.png
SpyNote5.0/App_Resources/Flag/ng.png
.png
SpyNote5.0/App_Resources/Flag/ni.png
.png
SpyNote5.0/App_Resources/Flag/nl.png
.png
SpyNote5.0/App_Resources/Flag/no.png
.png
SpyNote5.0/App_Resources/Flag/np.png
.png
SpyNote5.0/App_Resources/Flag/nr.png
.png
SpyNote5.0/App_Resources/Flag/nu.png
.png
SpyNote5.0/App_Resources/Flag/nz.png
.png
SpyNote5.0/App_Resources/Flag/om.png
.png
SpyNote5.0/App_Resources/Flag/pa.png
.png
SpyNote5.0/App_Resources/Flag/pe.png
.png
SpyNote5.0/App_Resources/Flag/pf.png
.png
SpyNote5.0/App_Resources/Flag/pg.png
.png
SpyNote5.0/App_Resources/Flag/ph.png
.png
SpyNote5.0/App_Resources/Flag/pk.png
.png
SpyNote5.0/App_Resources/Flag/pl.png
.png
SpyNote5.0/App_Resources/Flag/pm.png
.png
SpyNote5.0/App_Resources/Flag/pn.png
.png
SpyNote5.0/App_Resources/Flag/pr.png
.png
SpyNote5.0/App_Resources/Flag/ps.png
.png
SpyNote5.0/App_Resources/Flag/pt.png
.png
SpyNote5.0/App_Resources/Flag/pw.png
.png
SpyNote5.0/App_Resources/Flag/py.png
.png
SpyNote5.0/App_Resources/Flag/qa.png
.png
SpyNote5.0/App_Resources/Flag/re.png
.png
SpyNote5.0/App_Resources/Flag/ro.png
.png
SpyNote5.0/App_Resources/Flag/rs.png
.png
SpyNote5.0/App_Resources/Flag/ru.png
.png
SpyNote5.0/App_Resources/Flag/rw.png
.png
SpyNote5.0/App_Resources/Flag/sa.png
.png
SpyNote5.0/App_Resources/Flag/sb.png
.png
SpyNote5.0/App_Resources/Flag/sc.png
.png
SpyNote5.0/App_Resources/Flag/scotland.png
.png
SpyNote5.0/App_Resources/Flag/sd.png
.png
SpyNote5.0/App_Resources/Flag/se.png
.png
SpyNote5.0/App_Resources/Flag/sg.png
.png
SpyNote5.0/App_Resources/Flag/sh.png
.png
SpyNote5.0/App_Resources/Flag/si.png
.png
SpyNote5.0/App_Resources/Flag/sj.png
.png
SpyNote5.0/App_Resources/Flag/sk.png
.png
SpyNote5.0/App_Resources/Flag/sl.png
.png
SpyNote5.0/App_Resources/Flag/sm.png
.png
SpyNote5.0/App_Resources/Flag/sn.png
.png
SpyNote5.0/App_Resources/Flag/so.png
.png
SpyNote5.0/App_Resources/Flag/sr.png
.png
SpyNote5.0/App_Resources/Flag/st.png
.png
SpyNote5.0/App_Resources/Flag/sv.png
.png
SpyNote5.0/App_Resources/Flag/sy.png
.png
SpyNote5.0/App_Resources/Flag/sz.png
.png
SpyNote5.0/App_Resources/Flag/tc.png
.png
SpyNote5.0/App_Resources/Flag/td.png
.png
SpyNote5.0/App_Resources/Flag/tf.png
.png
SpyNote5.0/App_Resources/Flag/tg.png
.png
SpyNote5.0/App_Resources/Flag/th.png
.png
SpyNote5.0/App_Resources/Flag/tj.png
.png
SpyNote5.0/App_Resources/Flag/tk.png
.png
SpyNote5.0/App_Resources/Flag/tl.png
.png
SpyNote5.0/App_Resources/Flag/tm.png
.png
SpyNote5.0/App_Resources/Flag/tn.png
.png
SpyNote5.0/App_Resources/Flag/to.png
.png
SpyNote5.0/App_Resources/Flag/tr.png
.png
SpyNote5.0/App_Resources/Flag/tt.png
.png
SpyNote5.0/App_Resources/Flag/tv.png
.png
SpyNote5.0/App_Resources/Flag/tw.png
.png
SpyNote5.0/App_Resources/Flag/tz.png
.png
SpyNote5.0/App_Resources/Flag/ua.png
.png
SpyNote5.0/App_Resources/Flag/ug.png
.png
SpyNote5.0/App_Resources/Flag/um.png
.png
SpyNote5.0/App_Resources/Flag/us.png
.png
SpyNote5.0/App_Resources/Flag/uy.png
.png
SpyNote5.0/App_Resources/Flag/uz.png
.png
SpyNote5.0/App_Resources/Flag/va.png
.png
SpyNote5.0/App_Resources/Flag/vc.png
.png
SpyNote5.0/App_Resources/Flag/ve.png
.png
SpyNote5.0/App_Resources/Flag/vg.png
.png
SpyNote5.0/App_Resources/Flag/vi.png
.png
SpyNote5.0/App_Resources/Flag/vn.png
.png
SpyNote5.0/App_Resources/Flag/vu.png
.png
SpyNote5.0/App_Resources/Flag/wales.png
.png
SpyNote5.0/App_Resources/Flag/wf.png
.png
SpyNote5.0/App_Resources/Flag/ws.png
.png
SpyNote5.0/App_Resources/Flag/ye.png
.png
SpyNote5.0/App_Resources/Flag/yt.png
.png
SpyNote5.0/App_Resources/Flag/za.png
.png
SpyNote5.0/App_Resources/Flag/zm.png
.png
SpyNote5.0/App_Resources/Flag/zw.png
.png
SpyNote5.0/App_Resources/Flag16.rar
.rar
SpyNote5.0/App_Resources/Flag32.rar
.rar
SpyNote5.0/App_Resources/OBU.inf
SpyNote5.0/App_Resources/Terminal.inf
SpyNote5.0/App_Resources/apktool/apktool.zip
.zip
SpyNote5.0/App_Resources/icons/about/img_0.psd
.png
SpyNote5.0/App_Resources/icons/account_manager/account.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.android.email.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.bbm.account.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.bbm.contacts.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.dropbox.android.account.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.facebook.auth.login.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.facebook.messenger.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.google.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.sec.android.app.sns3.twitter.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.skype.contacts.sync.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.twitter.android.auth.login.png
.png
SpyNote5.0/App_Resources/icons/account_manager/com.whatsapp.png
.png
SpyNote5.0/App_Resources/icons/account_manager/instagram.png
.png
SpyNote5.0/App_Resources/icons/account_manager/org.telegram.messenger.png
.png
SpyNote5.0/App_Resources/icons/account_manager/org.telegram.plus.png
.png
SpyNote5.0/App_Resources/icons/account_manager/snapchat.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/-1.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/Incoming.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/Missed.png
.png
SpyNote5.0/App_Resources/icons/calls_manager/Outgoing.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/com.google.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/com.skype.contacts.sync.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/com.whatsapp.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/facebook-box.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/instagram.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/phone.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/sim.png
.png
SpyNote5.0/App_Resources/icons/contacts_manager/snapchat.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/acc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ad.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/b.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/c.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ca.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/cat.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ch.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/clo.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/cp.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/d.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/del.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/dn.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ed.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/eff.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/f.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/flash.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/foc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/inf.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/k.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/loc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ma.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/mc.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/op_app.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/oppf.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/pack.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/pas.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ph.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/play.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/play_s.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/prg.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/re.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/ren.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/s.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/sce.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/set.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/setw.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/stop_s.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/t.png
.png
SpyNote5.0/App_Resources/icons/ctx_menu/u.png
.png
SpyNote5.0/App_Resources/icons/file_manager/-1.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.3gp.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.aac.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.avi.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.bmp.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.css.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.doc.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.flac.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.flv.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.gif.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.htm.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.html.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.imy.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.jpg.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.js.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.m4a.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mid.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mkv.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mov.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mp3.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mp4.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.mxmf.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.ogg.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.ota.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.pdf.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.php.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.png.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.rar.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.rtttl.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.rtx.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.ts.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.txt.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.wav.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.webp.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.wmv.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.xmf.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.xml.png
.png
SpyNote5.0/App_Resources/icons/file_manager/.zip.png
.png
SpyNote5.0/App_Resources/icons/file_manager/Folder Files.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/Rotate180.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/chevron-left.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/chevron_right.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/dow.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/errors.ico
SpyNote5.0/App_Resources/icons/icon_diverse/ico_chat.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/ico_chat2.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/icon_default.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/li_arr.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/ri_arr.png
.png
SpyNote5.0/App_Resources/icons/icon_diverse/up.png
.png
SpyNote5.0/App_Resources/icons/icon_window/ic_Server.ico
SpyNote5.0/App_Resources/icons/icon_window/ic_ServerErr.ico
SpyNote5.0/App_Resources/icons/location_manager/location.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/bluetooth.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/gps.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/mobile_data.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/normal.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/silent.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/vibrate.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/wifi_connected.png
.png
SpyNote5.0/App_Resources/icons/phone_bar/wifi_disconnected.png
.png
SpyNote5.0/App_Resources/icons/phone_info/-1.png
.png
SpyNote5.0/App_Resources/icons/phone_info/battery.png
.png
SpyNote5.0/App_Resources/icons/phone_info/device.png
.png
SpyNote5.0/App_Resources/icons/phone_info/sim.png
.png
SpyNote5.0/App_Resources/icons/phone_info/system.png
.png
SpyNote5.0/App_Resources/icons/phone_info/wifi.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/Key&ScreenOff.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/Key&ScreenOn.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/ScreenOff.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/ScreenOn.png
.png
SpyNote5.0/App_Resources/icons/phone_lock/null.png
.png
SpyNote5.0/App_Resources/icons/sms_manager/sms.png
.png
SpyNote5.0/App_Resources/icons/sms_manager/smsopen.png
.png
SpyNote5.0/App_Resources/icons/wp/null.png
.png
SpyNote5.0/AxInterop.WMPLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote5.0/Interop.WMPLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote5.0/Patch/Patch-StaminaMode-release.apk
.apk android

com.eset.ems2.gp

yps.eton.application.M

Activities

yps.eton.application.M

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALL_LOG
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INSTALL_PACKAGES
android.permission.PROCESS_OUTGOING_CALLS

Receivers

yps.eton.application.B

android.intent.action.BOOT_COMPLETED

yps.eton.application.C

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

yps.eton.application.S

android.provider.Telephony.SMS_RECEIVED

yps.eton.application.D

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

Services

yps.eton.application.k

android.accessibilityservice.AccessibilityService
SpyNote5.0/Patch/Patch-release.apk
.apk android

yps.eton.application

yps.eton.application.M

Activities

yps.eton.application.M

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALL_LOG
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INSTALL_PACKAGES
android.permission.PROCESS_OUTGOING_CALLS

Receivers

yps.eton.application.B

android.intent.action.BOOT_COMPLETED

yps.eton.application.C

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

yps.eton.application.S

android.provider.Telephony.SMS_RECEIVED

yps.eton.application.D

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

Services

yps.eton.application.k

android.accessibilityservice.AccessibilityService
SpyNote5.0/SpyNote.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\scream\Desktop\WindowsApplication1\WindowsApplication1\WindowsApplication1\obj\Debug\SpyNote.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Password: infected

Password: infected

Password: infected

Password: infected

Password: infected

Password: infected

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 50KB - Virtual size: 50KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 321KB - Virtual size: 321KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 512B - Virtual size: 12B

com.eset.ems2.gp

yps.eton.application.M

Activities

yps.eton.application.M

Permissions

Receivers

yps.eton.application.B

yps.eton.application.C

yps.eton.application.S

yps.eton.application.D

Services

yps.eton.application.k

yps.eton.application

yps.eton.application.M

Activities

yps.eton.application.M

Permissions

Receivers

yps.eton.application.B

yps.eton.application.C

yps.eton.application.S

yps.eton.application.D

Services

yps.eton.application.k

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 362KB - Virtual size: 362KB

.rsrc Size: 363KB - Virtual size: 363KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 50KB - Virtual size: 50KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 321KB - Virtual size: 321KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 362KB - Virtual size: 362KB

.rsrc
Size: 363KB - Virtual size: 363KB

.reloc
Size: 512B - Virtual size: 12B