Overview
overview
10Static
static
10SpyNote v7...��.zip
windows10-ltsc 2021-x64
8Software U...rol.7z
windows10-ltsc 2021-x64
1DefenderControl.exe
windows10-ltsc 2021-x64
3SpyNote v7...ib.dll
windows10-ltsc 2021-x64
1SpyNote v7...pi.dll
windows10-ltsc 2021-x64
1SpyNote v7...ib.dll
windows10-ltsc 2021-x64
1SpyNote v7...nt.jar
windows10-ltsc 2021-x64
1SpyNote v7...IP.dat
windows10-ltsc 2021-x64
3SpyNote v7...BU.inf
windows10-ltsc 2021-x64
1SpyNote v7...ld.exe
windows10-ltsc 2021-x64
1SpyNote v7...xe.xml
windows10-ltsc 2021-x64
3SpyNote v7...ol.zip
windows10-ltsc 2021-x64
1apktool/apktool.bat
windows10-ltsc 2021-x64
1apktool/apktool.jar
windows10-ltsc 2021-x64
1apktool/signapk.jar
windows10-ltsc 2021-x64
1SpyNote v7...ub.apk
windows10-ltsc 2021-x64
3SpyNote v7...va.jar
windows10-ltsc 2021-x64
1platform-t...pi.dll
windows10-ltsc 2021-x64
3platform-t...pi.dll
windows10-ltsc 2021-x64
3platform-t...db.exe
windows10-ltsc 2021-x64
3platform-t...ns.zip
windows10-ltsc 2021-x64
1SpyNote v7...in.exe
windows10-ltsc 2021-x64
1SpyNote v7...��.exe
windows10-ltsc 2021-x64
8SpyNote v7...co.scr
windows10-ltsc 2021-x64
10SpyNote v7...pk.jar
windows10-ltsc 2021-x64
1软件使�...rol.7z
windows10-ltsc 2021-x64
1软件使�...ol.exe
windows10-ltsc 2021-x64
3Analysis
-
max time kernel
97s -
max time network
146s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
20-12-2024 13:39
Behavioral task
behavioral1
Sample
SpyNote v7.0.zip
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
Software Usage Tutorial/DefenderControl.7z
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral3
Sample
DefenderControl.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
SpyNote v7.0/AxInterop.WMPLib.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral5
Sample
SpyNote v7.0/CoreAudioApi.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral6
Sample
SpyNote v7.0/Interop.WMPLib.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral7
Sample
SpyNote v7.0/Resources/Clint.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral8
Sample
SpyNote v7.0/Resources/Imports/GeoIP/GeoIP.dat
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral9
Sample
SpyNote v7.0/Resources/Imports/OBU.inf
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral10
Sample
SpyNote v7.0/Resources/Imports/Payload/Build.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral11
Sample
SpyNote v7.0/Resources/Imports/Payload/Build.exe.xml
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral12
Sample
SpyNote v7.0/Resources/Imports/Payload/apktool.zip
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral13
Sample
apktool/apktool.bat
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral14
Sample
apktool/apktool.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral15
Sample
apktool/signapk.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral16
Sample
SpyNote v7.0/Resources/Imports/Payload/stub.apk
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral17
Sample
SpyNote v7.0/Resources/Imports/PlayerJava/PlayerJava.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral18
Sample
platform-tools/AdbWinApi.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral19
Sample
platform-tools/AdbWinUsbApi.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral20
Sample
platform-tools/adb.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral21
Sample
platform-tools/api/annotations.zip
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral22
Sample
SpyNote v7.0/Resources/Imports/platform-tools/plwin.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral23
Sample
SpyNote v7.0/SpyNote v7.0.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral24
Sample
SpyNote v7.0/ico.scr
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral25
Sample
SpyNote v7.0/signapk.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral26
Sample
软件使用教程/DefenderControl.7z
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral27
Sample
软件使用教程/DefenderControl.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
Software Usage Tutorial/DefenderControl.7z
-
Size
494KB
-
MD5
118233a92e7e62658ac601b02f9f3c7b
-
SHA1
e0b7ccb384ec3daff55cdef70364bb57934dfc4c
-
SHA256
e56dc7603a16fc75622ff97f35b1b8a66a554cfe05c0022b61887f3a6874e284
-
SHA512
a6bafb444f561c5b3f92114f865976311cb5ed1b3ccec215e2780d255383c424aaadb0af93854b0b3d843435c4b94eaadb621391d5a63f968dfecc2e9b88f2c5
-
SSDEEP
12288:ppTGizva32uzU7SOvi56/Nu90uRKGyburq6f1dAYkyV:PTGSambQ56/OXI+rBdAtyV
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2384 7zFM.exe Token: 35 2384 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2384 7zFM.exe